TWISTS OF X{7) AND PRIMITIVE SOLUTIONS TO + = z 



BJORN POONEN, EDWARD F. SCHAEFER, AND MICHAEL STOLL 

Abstract. Wc find the primitive integer solutions to + = . A nonabelian descent 
argument involving the simple group of order 168 reduces the problem to the determination 
of the set of rational points on a finite set of twists of the Klein quartic curve X. To restrict 
the set of relevant twists, we exploit the isomorphism between X and the modular curve 
X{1), and use modularity of elliptic curves and level lowering. This leaves 10 genus-3 curves, 
whose rational points are found by a combination of methods. 



1. Introduction 

1.1. Main result. Fix integers p,q,r > 1. An integer solution {x,y,z) to + y'^ = is 
called primitive if gcd(x, z) = 1. The main goal of this paper is to prove: 

Theorem 1.1. The primitive integer solutions to x"^ + y^ = z'^ are the 16 triples 

(±1,-1,0), (±1,0,1), ±(0,1,1), (±3,-2,1), (±71,-17,2), 

(±2213459, 1414, 65), (±15312283, 9262, 113), (±21063928, -76271, 17) . 

1.2. Previous work on generalized Fermat equations. We temporarily return to the 
discussion of x^ + y'^ = z^ for a fixed general triple (p, g, r). 

Let X = - ± - + - - 1- There is a naive heuristic that for each triple of integers (x, y, z) 
with |x| < \y\ < B^'\ \z\ < B^'\ the probability that x^ + y'^ = z" is 1/5: this leads to 

the guesses that the set of primitive integer solutions is finite when x < and infinite when 
X > 0. In fact, these statements are theorems, proved by Darmon and Granville [Darmon- 
Granvillel995] and Beukers [Beukersl998], respectively.^ 

The method of descent^ in one form or another, is the key ingredient used in the proofs of 
these theorems. Descent relates the primitive integer solutions to the rational points (possibly 
over some number field) on one or more auxiliary curves, whose Euler characteristic 2 — 2g 
is a positive integer multiple of x- This connection is made clear in [Darmonl997Faltings], 
for example. In Section 3, we will explain it in detail in the context of the special case 
(p,g,r) = (2,3,7). 

Suppose X > 0- Then 2 — 2g > {), so g = Q. Thus the auxiliary curves that have rational 
points are isomorphic to P^. The conclusion is that the primitive integer solutions fall into a 
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finite number of parametrized families. These parametrizations have been found exphcitly for 
every {p, q, r) with x > 0, as we now indicate. The case where some exponent is 1 is trivial, 
and the case where the multiset {p,q,r} equals {2,2,n} for some n > 2 is elementary. The 
only remaining possibilities are {2, 3, 3}, {2, 3, 4}, {2, 3, 5}; these were completed by Mordell, 
Zagier, and Edwards, respectively. See [Edwards2004] for details. 

If X = 0, then 2 — 2g = 0, so g = 1. There are only the cases {2, 3, 6}, {2, 4, 4}, {3, 3, 3}, 
and the auxiliary curves turn out to be elliptic curves E over Q, and descent proves that 
E{Q) is finite in each case. (The finiteness should not be surprising, since these elliptic 
curves have very low conductor.) One then easily finds that the only nontrivial primitive 
solution, up to permutations and sign changes, is 1^ + 2^ = 3^. Many, if not all, of these cases 
are classical: Fermat invented the method of descent to do (4,4,2), and Euler did (3,3,3).^ 

If X < 0, then g > 1. Each auxiliary curve has finitely many rational points, by [Falt- 
ingsl983], and hence we get the Darmon-Granville result that for each {p,q,r) there are at 
most finitely many nontrivial primitive solutions. For many [p, q, r) these solutions have 
been determined explicitly. These are summarized in Table 1. 

1.3. Why x'^ + = is particularly difficult. We give several answers. 

1.3.1. It corresponds to the negative value of x closest to 0. When {p,q,r) is such that x is 
just barely negative, the naive heuristic mentioned earlier predicts that the set of primitive 
integer solutions should be "just barely finite" in the sense that it becomes likely that there 
are several even of moderately large size. The existence of solutions, especially large solutions, 
naturally tends to make proving the nonexistence of others a difficult task. 

From this point of view, the triple {p, q, r} with x < that should be most difficult is the 
one with x closest to 0: this is {2, 3, 7}. Indeed the equation x'^+y^ = has several solutions, 
and some of them are large. Now that this equation is finished, we know the complete list 
of solutions for every (p, g, r) for which x < and for which nontrivial primitive solutions 
(excluding 1" + 2^ = 3^) are known to exist. 

1.3.2. The exponents are prime. The triple {2, 3, 8} analyzed by Bruin has almost the same 
value of X, and also has large solutions, so it also is difficult. But at least it could be studied 
by using Zagier's parametrizations for the case {2,3,4} (with x > 0). 

1.3.3. The exponents are pairwise relatively prime. For descent, one requires finite etale 
covers, and (geometrically) abelian etale covers can be easily constructed in cases where two 
of the exponents share a common factor. In contrast, for {2,3,7}, the smallest nontrivial 
Galois etale covering has a nonabelian Galois group of size 168. Before the present work, no 
pairwise coprime {p, q, r) with x < had been studied successfully. 



'Eulcr's argument had a flaw, but it was later fixed by others. 
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{2,3,7} See Theorem 1.1. 

{2,3,8} [Bruinl999,Bruin2003]: 1549034^ + 33^ = 15613^ 962223 + 43^ = 300429072 
{2,3,9} [Bruin2004] : 13^ + 7^ = 2^ 

{2, 2£, 3} [Chen2004preprmt], for prime 7 <i< 1000 with ^ 31 
{2,4,5} [Bruin2003]: 7^ + 2^ = 3^ 11^ + 3^ = 122^ 
{2,4,6} [Bruinl999] 
(2,4,7) [Ghioca2002] 

(2, 4, i) [Ellenberg2004Fermat], for prime £ > 211 
(2,77,, 4) follows easily from [Bennett-Skinner2004]; 

(4, n, 4) was done earlier in [Darmonl993CR] 
{2,n,n} [Darmon-Merell997]; others for small n 
{3,3,4} [Brmn2000] 
{3, 3, 5} [Brmn2000] 

{3, 3, £} [Krausl998], for prime 17 < £ < 10000 
{3,n, n} [Darmon-Merell997]; others for small n 
{2n, 2n, 5} [Bennett2004preprint] 

{n,n,n} [Wilesl995, Taylor- Wilesl995], building on work of many others 

Table 1. We list exponent triples {p,q,r) such that x < and the primi- 
tive integer solutions to + y'^ = have been determined. The notation 
{p, q, r} means that the solutions have been determined for every permutation 
of {p,q,r): this makes a difference only if at least two of p,q,r are even. So- 
lutions are listed only up to sign changes and permutations. Solutions of the 
form 1" + 2^ = 3^ are omitted. Heuristics suggest that probably there are no 
more solutions for (p, q, r) with x < 0: in fact a cash prize awaits anyone who 
finds a new solution [Darmonl997Faltings]. 



2. Notation 

If A; is a field, then k denotes an algebraic closure, and Qk = Gal{k/k). Let Q be the 
algebraic closure of Q in C. Let ( = e^'^^l'^ G Q. 

If X is a scheme over a ring i?, and B! is an i?- algebra, then X^j denotes X x Spec B! . 

Spec R 

If X is a variety over Q, and i? is a localization of Z, then X^ will denote a smooth model 
of X over R (assuming it exists), and X{R) means X/?(i?). Conversely, if X^ is a scheme 
over such a ring R, then X will denote the generic fiber, a scheme over Q. 
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We say that a /c-variety y is a twist of a /c-variety X if 1^ ^ X-^. Twists of morphisms are 
defined similarly. 

If M is a ^Q-module, and k is an extension of Q, then denotes the same group with 
the action of Qk via the restriction map Qk — ^ Gq- In particular, Mq denotes the abelian 
group with no Galois action. 

3. The theory behind the initial descent 

This section explains the theory that reduces the original problem to the problem of 
determining the rational points on a finite list of auxiliary curves, which turn out to have 
genus 3. 

The argument is essentially the same as that in [Darmon-Granvillel995] (see also [Dar- 
monl997Faltings]), though we do have one small theoretical innovation: By working with 
punctured affine surfaces instead of "M-curves" (which are essentially the stack quotients of 
the surfaces by a Gm-action), we can use the standard theory of descent for finite etale covers 
of varieties a la Chevalley-Weil and avoid having to use or develop more general statements 
for ramified coverings or for stacks. Keeping the stacks in the back of one's mind, however, 
still simplifies the task of finding the etale covers of the punctured surfaces; we will use them 
for this purpose. 

Another difference in our presentation is that we word the argument so as to obtain a finite 
list of curves over Q instead of a single curve over a larger number field; this is important 
for the practical computations. 

Equations for the varieties and morphisms of this section will appear in later sections of 
our paper. 

3.1. Scheme-theoretic interpretation of the problem. Start with the subscheme x"^ + 
y'^ = in A| and let S% be the (quasi-affine) scheme obtained by deleting the subscheme 
X = y = 2 = 0. Then ^(Z) is the set of primitive integer solutions to + y'^ = z' . 

3.2. An etale cover of S'c- In order to apply the method of descent, we need a finite etale 
cover of 5'z, or at least of ^zji/atj for some A^ > 1. We first find a finite etale cover of S'c. 

The multiplicative group Gm acts on S'c: namely, A acts by {x,y,z) {X^^x, X^^y, \^z). 
The subfield of the function field C(S'c) invariant under Gm is C(j) where j := 1728 y^ / z'^ , so 
the quotient of S'c by Gm should be birational to with coordinate j. (The reason for the 
factor 1728 and for the name j will become clear later on.) But Gm does not act freely on 
S'c: the points where one of x, y, z vanishes have nontrivial stabilizers. Therefore, it is best 
to consider the stack quotient [S'c/Gm], which looks like P"*^ except that the points j = 1728, 
j = 0, j = oo are replaced by a |-point, a |-point, and a |-point, respectively. (This stack 
is essentially the same as the "M-curve" of [Darmonl997Faltings].) The induced morphism 
[Sc/Gm] ^ P^ is a ramified map of degree 1, with ramification indices 2, 3, 7 above 1728, 0, 
oo, respectively. 

The strategy for constructing a finite etale cover Xc of S'c will be first to construct a finite 
etale cover Xq of [Sc/Gm] and then to base extend by Sc [Sc/Gm]- A finite etale cover 
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of [Sc/Gm] is a finite cover of whose ramification is accounted for by the ramification of 
[5'c/Gm] — > P^: in other words, a finite cover of ramified only above 1728, 0, and oo, 
and with ramification indices 2, 3, 7, respectively. In fact, we will seek such a cover that 
is generically Galois. Such covers can be specified analytically by giving the monodromy 
above the three branch points, and are automatically algebraic, by the Riemann Existence 
Theorem. Specifically, the Galois group should be a Hurwitz group: a finite group generated 
by elements a, b, c of orders 2, 3, 7, respectively, such that abc = 1. In principle we could 
use any Hurwitz group (even the monster group is a possibility [Wilson2001]), but to make 
future computations practical, we choose the smallest Hurwitz group: the simple group 
G := PSL2(F7) of order 168, with generators a = ( o -i ), 6 = ( } ), c = ( J J ). 

We next identify the covering curve Xq. Since [S'c/Gm] is obtained from P^ by delet- 
ing three points and reinserting a |-point, a |-point, and a y-point, its topological Euler 
characteristic satisfies 

X([5c/Gj) = x(P^) - (1 + 1 + 1) + + ^ + 7) 
1 1 1 

=2+3+7-^ 

1 

~ ^42' 

The genus g of its degree- 168 cover Xc satisfies 

2-2g = x{Xc) = 168x([5c/G^]) = -4. 

Hence Xc is a curve of genus 3 with 168 automorphisms; the only such curve over C is the 
Klein quartic curve defined in P^ by the homogeneous equation 

x^y + y^z + z^x = 0. 

See [Elkiesl999] for many facts about X and G. The base extension of Xc by Sc [5'c/Gm] 
is the punctured cone Xq above Xq, obtained by removing the origin from the surface in 
defined by the same quartic polynomial. 

3.3. An etale cover of Sz[i/42]- Let X and X be the varieties over Q defined by the same 
equations, and let Xji and Xr be the corresponding smooth models over R := Z[l/42]. We 
identify G with Aut(Xc) = Aut(XQ), so Qq acts on G. The degree-168 etale map Ac — * Sc 
arises from an etale map vf : Ar Sr; the associated morphism A — s> P^ is given explicitly 
in Section 7.3. 

3.4. Descent. Descent theory (cf. [Chevalley-Weill930] and [Skorobogatov2001, §5.3]) tells 
us the following: 

• The set of classes in the Galois cohomology set H^(Q, G) that are unramified outside 2, 

3, and 7 is finite. ( "Unramified outside {2, 3, 7}" means that the image in H^(Qp°'', G) 

is the neutral element for every finite prime p ^ {2, 3, 7}.) 
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(a, b, c) I j := I ^ ■.Y^ = X^ + ^hX-2a 

c 

Figure 1. The squiggly arrows denote etale morphisms. All vertical and 
diagonal morphisms are finite of degree 168. The schemes may be considered 
over C or over R = Z[l/42], or anything in between. 



• Each such class corresponds to an isomorphism class of twists vf ' : X' ^ S* of vr : X — > 
S. Choosing a cocycle in the class lets one construct a twist within the isomorphism 
class. 

• The set S{R) is the disjoint union of the sets 7t'{X'{R)) so obtained. 
In fact, each such cocycle twists the upper half of the square 

X > X X' > X' 

s- TT to yield s-' 

S pi S 

Since Pici? is trivial, each map X'{R) —>■ X'{R) = X'{Q) is surjective. Hence S'(Z) C 
S{R) = IJ j~^(7r'(X'(Q))), where the union is over our finite list of twists X' of X. So to 
solve the original equation, it would suffice to: 

(1) Find equations for each twist X' and map tt' arising from a cocycle unramified outside 
2, 3, 7. 

(2) Determine X'{Q) for each X'. (Since X' is a genus-3 curve, X'{Q) is finite by [Falt- 
ingsl983].) 

The first task reduces to a finite computation in principle, because Hermite's theorem on 
number fields with bounded ramification is effective. The second task is not known to reduce 
to a finite computation, and in fact for one of the curves X' that arises, we are unable to 
complete this task! (See Section 12.1.) 

But since we want S'(Z) and not all of S{R), we can get by with computing only the 
rational points inside certain "residue classes" on each curve. Say that X' passes the local 
test if the subset 7r'(X'(Qp)) fl j{S{Zp)) of P^(Qp) is nonempty for all primes p. We will do 
the following: 

(1) For each X' passing the local test, find an equation for X' and tt'. 

(2) For each such X', determine {P G X'{Q) : n'{P) G j{S{Zp)) for all primes p}. 
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4. The modular interpretation 



In Section 4.3 we observe that the map X ^ is isomorphic to the map of modular 
curves X{y) — > X{1). In later sections this will be used to help catalogue the needed twists 
of X . Indeed, each twist of X(7) is a moduli space classifying elliptic curves with an exotic 
level-7 structure, so we reduce to a problem of enumerating level structures. 

4.1. Definition of X{1). If E is an elliptic curve over a field k of characteristic zero, let 
E\J] be the ^^-module of /c-points killed by the multiplication-by-7 map E. The 
Weil pairing gives an isomorphism E\l] ^ /iy. Let M be the ^Q-module /iy x X/TL^ 
There is a canonical isomorphism /\^ M ^ /i7 mapping ((^^, 0) A (C*^, 1) to C,. When we write 
(f): Mk ^ E[7], we mean that </> is a symplectic isomorphism, that is, an isomorphism of 
^fc-modules such that /\ (p- /\ — > /\ E[7] is the identity n-^ —>■ iij. 

For a field k of characteristic zero, let y{l){k) be the set of isomorphism classes of pairs 
{E^cj)) where E is an elliptic curve over k and 0: ^ E\7]. It is possible to extend 3^(7) 
to a functor from Q-schemes to sets, with essentially the same definition. The functor 3^(7) 
is representable by a smooth affine curve Y{1) over Q. The curve Y{7) can be completed to 
a smooth projective curve X{7) over Q. 

Remark 4.1. The Q-variety X(7) extends to a smooth projective curve over Zi[l/7] with 
geometrically integral fibers. It too is a fine moduli space, representing a certain functor. 
There is even a moduli scheme over Z: see [Katz-Mazurl985]. 

Warning 4.2. Some authors use instead the set of isomorphism classes of pairs {E, cf)) where 
0: (Z/7Z)^ ~ £'[7] is an isomorphism of Galois modules not necessarily respecting the 
symplectic structures. This leads to an irreducible scheme over Q that over Q(C) decomposes 
into 6 disjoint components, each isomorphic to our X(7)q(^). 

4.2. Automorpiiisms of X(J) over Q. Let Y{1) be the (coarse) moduli space of elliptic 
curves over Q. The j-invariant gives an isomorphism Y{1) ^ A^. Let X{1) ^ be the 
usual compactification of Y{1). The forgetful functor mapping a pair [E, (p) to E induces a 
morphism Y{7) — *• Y{1) and hence also a morphism X{7) —>■ X{1). 

The isomorphism Mq ~ (Z/7Z)^ mapping (C", ^) to the column vector (l) identifies 

A iV% ^ ifir)^ with /\\Z/7Zy ~ Z/7Z. Therefore the group of symplectic automor- 
phisms of Mq equals 

Aut;,(MQ) = Aut4(Z/7Z)2) = SL2(F7), 

which we view as acting on the left on column vectors. If (7 G Aut/\(MQ), then g acts on 
the left on Y{7)q by mapping each pair {E, 0) to {E, o g^^); this automorphism of Y{7)q 
extends to an automorphism of A(7)q. Thus we obtain a homomorphism 

SL2(F7)^ AutA(7)Q. 

''Writing M = /iy x Z/7Z instead of M = Z/7Z x /xy does not change it (even considering symplectic 
structure). Our reason for this is so that when A/q is identified with column vectors, the action on SL2(F7) 
on agrees with its usual action on X{7), as groups equipped with a Qq-action. 
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Since Aut/\(MQ) acts transitively on the set of </> corresponding to a given E over Q, the 
covering X{7)^ — > X{1)q is generically Galois, and SL2(F7) surjects onto the Galois group 
of the covering. Pairs {E, (p) and {E, (f)') are isomorphic if and only if (p' = a o (p for some 
a G Aut(-E'); but Aut(-E) is generated by [—1] for most E, so the kernel of SL2(F7) — > 
Gal{X {7)q/ X is generated by the scalar matrix —1 G SL2(F7). In other words, there 
is an isomorphism PSL2(F7) ~ Gal{X{7)Q/X{l)^). 

4.3. The Klein quartic as X{7). There exists an isomorphism of Q- varieties X — » X{7) 
[Elkiesl999]. The group of automorphisms of X over Q has order 3, so the isomorphism 
X ~ ^(7) is not unique; we will take the the particular isomorphism in [Elkiesl999] for 
which the homogeneous coordinates x, y, z correspond on X{7) to cusp forms whose q- 
expansions begin 

X = + 4g - 3g2 - 5q^ + + 8q^ - lOg^ + - 6g^° + ...)> 

y = q^l\\ _ 3g _ g2 _^ - Qq^ - 4g6 _^ 2q^ + 9g^° + ■■■), and 

z = q^/\l - 3g + 4g3 + + 3g^ - I2q^ - + 7q^ + 16g^° + ...). 

Taking the quotient of each curve by its Q-automorphism group, we obtain the commutative 
parallelogram at the right in Figure 1. Comparing the branch points and ramification indices 
of X{7) X{1) with X ^ determines the values of the isomorphism X{1) ^ at 3 
points; it follows that the isomorphism is the standard one given by the j-invariant. 

4.4. Twists of X{7). Since Qq acts on M^, it acts also on KvX;^{M-q). The homomorphism 
AutA(A%) Aut(X(7)Q) is ^Q-equivariant, so we obtain a map of cohomology sets 

H1(6;q, Aut^M^)) ^ Hi(^Q, Aut(X(7)^)). 

This map, which is not a bijection, can be reinterpreted as 

(4.3) {symplectic twists of M} {twists of X(7)}. 

(A symplectic twist of M is a ^Q-module M' with an isomorphism M' ^ /i7 such that 
there is an isomorphism l: Mq — > such that /\ is the identity fij — > fi^ over Q.) 
In (4.3), let Xm'{7) be the image of M'. Thus Xm'{7) is the smooth projective model of 
the smooth affine curve whose points classify pairs {E, </>) where E is an elliptic curve and 
0: M' ~ E[7]. 

Since Aut(X(7)Q) acts as automorphisms of X{7)q over X(1)q, there is a canonical mor- 
phism Xm'{7) — > X{1). In the moduli interpretation, this is the forgetful functor mapping 

{E,(f)) to E. 

If a G F7 , composing /\^ M' ^ jjj with the a^'^-power map ji-j jjj gives a new isomor- 
phism A M' ^ /i7. Let M'" be M' with this new symplectic structure. If a = b^a for some 
b E ¥j , then multiplication-by-6 induces M'"" ^ M'". Thus only the image of a in F^/F^^ 

matters: we lose nothing by considering a = ±1 only. 
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If M' is a symplectic twist of M, and M" = M' (g) x for some quadratic character X'- 
{±1}, then the elements of H^(^q, AutA(MQ)) corresponding to M' and M" have the same 
image in H^(^q, Aut(X(7)Q)), because {±1} is in the kernel of K\xt;^{M^j Aut(X(7)Q). 

4.5. Twists of X(7) associated to elliptic curves. Let E be an elliptic curve over Q. 
Define Xe{7) := Xe[i]{7) and X^(7) := X^[7]-i(7). 

If F is a quadratic twist of E, then Xe(7) ~ Xpiy) and X^(7) ^ X^(7). 

Lemma 4.4. // F' is a quadratic twist of an elliptic curve F such that F[7] ~ £'[7] as 
Qq-modules without symplectic structure, then the point j{F') G X(1)(Q) is in the image of 
Xs(7)(Q) X(1)(Q) or X^(7)(Q) ^ X(1)(Q). 

Proof. By the discussion above, we need to have F[7] ~ i?[7] or F[7] ~ £'[7]~^, and so F 
gives rise to a rational point on X£;(7) or on X^{7). Therefore, j{F') = j{F) is in the image 
of Xe(7)(Q) -.X(1)(Q) or of X^(7)(Q) ^X(1)(Q). □ 

Warning 4.5. Not every twist of X{7) can be written as Xe{7) or X^{7) for an elliptic 
curve E over Q. For example, let M' := /if"^ x /if~^, equipped with a symplectic structure 
A M' ^ fiT, and let X' = Xm'{7). If X' were isomorphic to X^{7), it would also be 
isomorphic to Xe{7), since Aut(M') acts transitively on the symplectic structures on M'. 
This is impossible, because X'{Q) = 0: indeed, X'{¥2) = 0, since there are no elliptic curves 
E over F2 (not even degenerate ones corresponding to cusps) with E[7] ~ yuf ^ x fif~'^, that 
is, with the 2-power Frobenius acting on E[7] as multiplication-by-4. 

In fact, X{7) itself is another example of a twist that cannot be written as Xe{7) or X^{7) 
(at least if one requires -E to be a nondegenerate elliptic curve over Q): again Aut(M) acts 
transitively on the symplectic structures on M, and although this time X{7) has rational 
points, they are all cusps [Elkiesl999]. 

4.6. Primitive solutions and elliptic curves. Suppose (a, 6, c) G S{'L) and a, 6, c are 
nonzero. Then j := 1728 6'^/c^ is not 1728, 0, or 00. The corresponding point on X{1) is 
represented by the elliptic curve 

E = E(^aM- Y^ = X^ + ?,hX-2a 

and its quadratic twists. The twist X' of X in Section 3.4 for which j G 7r'(X'(Q)) corre- 
sponds to the twist Xe{7) of X{7). Therefore to find the relevant twists of X{7), it suffices 
to catalogue the possibilities for the ^Q-module £'[7], up to quadratic twist. Restrictions on 
£'[7] will be deduced from the following. 

Lemma 4.6. // (a, 6, c) G S'(Z) and a,b,c are nonzero, then 1728 is the j -invariant of 
an elliptic curve E over Q such that 

(a) The conductor N of E is of the form 2''3^J|pgj.p where r < 6, s < 3, and T is a 
finite set of primes > 5. 

(b) £'[7] is finite at 7 in the sense of [Serrel987, p. 189]. 
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Proof. 

(a) Since gcd(a, b,c) = 1 and + = c'', the integers a, b, c are pairwise relatively prime. 
We need to bound the p-adic valuation Vp{N) for each prime p. 

Case 1: p > 5 

Associated to the Weierstrass equation for E(^a,b,c) are the quantities 

C4 = -12'^b, C6 = 12^a, A = -123c^ 

(See [SilvermanAEC, III.§1] for definitions.) Suppose p > 5 is a prime dividing A^. Then 
p I A. But gcd(6, c) = 1, so p f C4. By [SilvermanAEC, VII. 5. 1(b)], E has multiplicative 
reduction at p, and Vp{N) = 1. 

Case 2: p = 3 

If 3 f c, then v^^N) < v^i^A) < 3. Therefore suppose 3 | c. Then 3 \ a,b. Let t = a/b G Z3. 
Then + b^ = (mod 3^) implies {a,b) = (— t^, — t^) (mod 3'''). The right hand side of 
the Weierstrass equation is now cong ruent to {X - t){X - t){X + 2t) modulo 3^ so the 
substitution X \—>- x + t results in a cubic polynomial congruent to + 3tx'^ modulo 3^. 
Hence we can twist by 1/3 to obtain an elliptic curve E' such that 

vsic'i) = V3{-I2'^b) -2 = and vsi^') = V3{-12^c^) - 6 > 0. 

Thus E' has multiplicative reduction, and v^i^N') = 1. 

Case 3: p = 2 

If 2 I c, then V2{N) < f2(A) < 6. Therefore suppose 2 | c. Twisting by —1 if necessary, 
we may assume a = 1 (mod 4). As in the previous paragraph, we have (a, 6) = {—t^, —t^) 
(mod 2^) for some t G Z2 and we can find a model y'^ = f{x) where f{x) = x^ + 3tx^ 
(mod 2^). Now a = 1 (mod 4) implies t = —1 (mod 4), so the further substitution y 1— y'+x 
shows that the model is not minimal at 2. Thus we arrive at a model E' with 

^2(4) = V2{-12%) -4 = and V2{A') = V2{-12^c^) - 12 > 0, 

and hence V2{N') = 1. 

(b) If 7 f c, then E has good reduction at 7, so E[7] is finite at 7. If 7 | c, then vi{j) = 
—7vt{c) is a negative multiple of 7, so by the theory of Tate curves, E[7] is finite at 7. (The 
twists done in part (a) affect the behavior at 2 and 3 independently, and do not interfere 
with the behavior at other primes.) □ 

5. Reducible 7- torsion 

By Lemma 4.6 we need only catalogue the possibilities for £'[7] (up to quadratic twist) 
such that E[7] is unramified outside {2, 3, 7}. In this section we assume moreover that E[7] 
is reducible as a ^Q-module. 
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Figure 2. Modular curves of level 7. 



5.1. Intermediate modular curves. Let Y^il) over Q be the affine curve parametrizing 
pairs {Ejtjj) where E is an elliptic curve and ip: fiY ^ E[7] is an injection. Let X^{7) be the 
smooth projective curve having Y^{7) as an affine subset. 



Remark 5.1. The curve ^^^(7) is a twist of the classical modular curve Xi{7), the completion 
of the curve 1^(7) parametrizing {E,P) where P is a point of exact order 7 on E: giving 
P is equivalent to giving an injection Z/7Z ^ £'[7]. In a less obvious way, X^(7) is also 
isomorphic to Xi{7): if {E, ip) as above is defined over k, one can map it to the pair {E', P') 
where E' is the elliptic curve E/iplfij) over k and P' G E'[7]{k) is the image of a point 
P G E[7]{k) whose Weil pairing with ip{C) gives (. 



Define Yq{7) as the (coarse) moduli space parametrizing pairs {E, C) where C is a (cyclic) 
order-7 subgroup of E, and define Xq{7) as the completed curve. 
The columns of Figure 2 show 

• the morphisms relating the modular curves, labelled by their degrees, 

• the moduli interpretations of these morphisms, 

• the subgroup Aut{X {7)q/ Zq) of Aut(X(7)Q/X(l)Q) = G corresponding to each in- 
termediate curve Z, and 

• the orders of these subgroups. 
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The notation B = ( o * ) means that B equals the image of {( g d) ^ SL2(F7)} in PSL2(F7) ^ 
G. 

5.2. The Galois action on G and its subgroups. Since M = ^7 x Z/7Z, we have 



which is the matrix ring M2(F7) with a nontrivial ^Q-action. This ^Q-action induces a Qq- 
action on PSL2(F7) making PSL2(F7) ~ G an isomorphism of Qq-groups (groups equipped 
with a continuous action of Qq). 

In particular, N fi^ as ^Q-groups, and S is a semidirect product of the subgroup 
H := (0 * ) — F7 /{±1} — Z/3Z (with trivial ^Q-action) by A^. Thus we have a split exact 
sequence of ^Q-groups 



The generators (7 := ( J { ) of ^ yU7 and /i := ( q 4 ) of ~ Z/3Z satisfy h~^gh = g"^. 
Under the isomorphism in Section 4.3, g and h correspond to the automorphisms {x : y : 
z) ^ (C^a: : : C^) ^"^^ {x : y : z) ^ {y : z : x) oi X, according to [Elkiesl999]. 

5.3. Nonabelian cohomology of B. Let E be an elliptic curve over Q such that E\l] is 
reducible as a ^Q-module. Thus there is a ^Q-stable order-7 subgroup G C -£^[7]. Choosing 
0: Mq such that 0(/i7) = G shows that the twist Xe{7) of X{7) arises from a 

cocycle taking values in the subgroup B of G. In this subsection, we calculate H^(^q, B)] in 
the next subsection, we use the results to write down equations for all Xe(7) corresponding 
to E with reducible E\l]. 

From the exact sequence (5.2) of ^Q-groups, we obtain the exact sequence of pointed 
sets [SerreGaloisCohomology, Proposition 38, p. 51] 



Define s as shown. Since the last map in (5.2) admits a section, s admits a section; in 
particular s is surjective. 

Suppose ^ is a cocycle representing a class \^] G II^(^(q, Z/3Z). Since Z/3Z acts on ji^, 
^ determines a twist ^/iy of /iy. A cohomologous cocycle would determine a (noncanoni- 
cally) isomorphic twist. Via the section oi B 'L/'i'L, we may view ^ also as a 5- valued 
cocycle. By [SerreGaloisCohomology, Corollary 2, p. 52], there is a natural surjective map 
H^(^Q,g/i7) ^ s"^([,^]). We now calculate H^(^q,^/X7). 




(5.2) 



/i7 ^ 5 -> Z/3Z 0. 



H^(e?Q,/i7) ^ H1(6;q,5) ^ Hi(e?Q,Z/3Z). 



Case 1: [C\ = . 
Then R\gQ,^fir) = H'iGQ, fij) - QVQ 



Case 2: [C] ^ 0. 
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Then [^] E H^(^q,Z/3Z) = Homconts(^Q, ^/SZ) corresponds to a cyclic cubic extension 
K of Q with a choice of generator r G Ga\{K/Q). From the Hochschild-Serre spectral 
sequence [SerreGaloisCohomology, p. 15] we can extract the exact sequence 

(5.3) E\G^\{K/Q), {^^,f-) ^ Hi(^Q,5/X7) H1(^x, ^/^r)^^™ 

^H2(Gal(ir/Q),(5/i7)^-'). 

The first and last terms are zero, since Gal(J'r/Q) and ^/iy have relatively prime orders. 
In the third term, Yi^ {Q k ■, s^^J^j) equals jK^'^ with a twisted action of Gal(i^/Q); thus 
H^(fo, 5/17)^''^^^/®, instead of equalling the sub group of /K^"^ fixed by the usual action 
of r, equals the subgroup [K^ j K^'^Y^'^ of jK^^ consisting of elements on which r has 
the same effect as squaring. (The 2 comes from the action of Z/3Z on yUy, that is, from the 
fact that h~^gh = g^.) Thus (5.3) gives 

5.4. Twists of X{y) corresponding to reducible E\l]. We now write down twists of 
X ~ ^(7) whose classes in H^(^q, G) represent the image of H^(^q, B) Y{^{Qq, G). 

Case 1: [j] = . 

Given a G , fix a G Q with a'' = a. The substitution (x, y, z) = {a^x, a^y, az) 
transforms into the plane curve 

{a^xf{a^y) + {a^y)\az) + {azfia'^x) = 0, 

which, if we divide by a and drop the bars, is the same as 

(5.4) X' : ax^y + y^z + z^x = 0. 

Let (3: Xq X^ be the isomorphism we just described. If we identify the automorphism 
{x : y : z) {(^x : (^y : (z) of Xq with g := (H) E N and with ( G fij, then the cocycle 
a (— > (3~^{^(3) E N is identified with the cocycle a ^-^ '^a^^/a~^ E fij. Thus the image of 
under 

QX ^ QX/QX7 ^ Hl(6;Q,/i7) - R^Gq^N) ^ ii\gQ,G) 

corresponds to the twist X' of X. In particular, all twists of X arising in Case 1 have the 
form (5.4), where a runs through positive integers representing the elements of Q^/Q^^. 
The same curves can be written in other ways. Suppose that X' is a curve given by 

ax^y + by'^z + cz^x = 

for some a,b,c E Zi>o- If p is a prime such that p"^ divides a, then multiplying by p and 
substituting x = x/p leads to an isomorphic curve of the same type but with a smaller value 
of abc. Similar reductions apply if p"^ divides b or c. Hence eventually we can reduce to a 
curve where a, b, and c are squarefree. Moreover we may assume that gcd(a, b,c) = 1 and 
that a > b and a > c. 

Case 2: [j] ^ . 
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We will write the action of t on K on the right, so that we can use notation such as 
a^"^"^ := {d^Y /a? for a G . Let £ G Kx + Ky + Kz be a linear form such that f"^, and 
i'^'^ form a i^-basis for Kx + i^l/ + Kz. Let a G -ft'^ be such that its image in K^ /K^^ lies 
in [K^ I K^''Y^'^ . Thus a^"^ = 6^ for some b e K^ . Applying + 2r + 4 and using = 1 
yields a"^ = 67r2+i4r+28^ gj^pg ^^(j^) _ follows that = 6-'+2-+4. 

Choose a G Q such that = a. Define elements a,- := and a^r := b'^'^'^a'^ of Q. 
(There is no action of r on a, so we interpret ar and a^,- as new labels.) Then al = and 

al^ = 

A calculation shows that the substitution (x, y, z) = {arrP"^ , ari'^, ai) transforms Xq into 
the plane curve 

(5.5) X,^e ■■ c^^f^^+^ + c^f^+^ + c£^+^^ = 0, 

where c = b'^'^^a G K^ . By symmetry, the coefficients of the polynomial in x, y, z defining 
Xc/ are fixed by r, and hence are in Q. A chase through definitions (similar to that in 
Case 1, but more tedious) shows that the -B- valued cocycle defined by the constructed 
isomorphism Xq — s> {Xc/)q represents the element of s~^([^]) coming from the image of 
in {K"" / K'''^y=\ 

In summary, all twists of X arising in Case 2 have the form Xc/ for some cyclic cubic 
extension K, some choice of r G Gal{K/Q), some choice of i, and some choice of c G K^ . 
Changing i does not change Xc^e- 

Changing a to a = d'^a for some d G K^ , so that the corresponding values of b and c are 
b = d'^~% and c = (i^^+^c, does not change Xc^i- Thus multiplying c by an element of 
does not change Xc/. (This amounts to changing i into dl, resulting in a linear substitution 
on (x,|/, z) with rational coefficients.) Multiplying c by an element of K^'^'^ +r+i) ^ qx 
simply multiplies the equation of X^/ by an element of Q^, so this also does not change 
Xc/. Since the difference of + r + 1 and + 3 equals r — 2, and since 7 is a multiple of 
r — 2 in Z[r]/(r^ — 1), multiplying c by an element of K^'^ or more generally, an element of 
^x(r-2)^ does not change Xc/. Since the natural map {K^ / K^'^Y^'^ — > K^ / K^^'^~'^'> is an 
isomorphism, it suffices to let c run through representatives of the elements of {K^ /K^'^Y^'^. 

5.5. Ramification conditions. In our application, we know by Lemma 4.6 that £'[7] is 
unramified outside {2, 3, 7}, just as M is. Therefore any isomorphism ^ E[7]q will be 
unramified outside {2, 3, 7}. The choice of isomorphism gives the cocycle defining the twist 
Xe{7) of -^(7), so the cocycle will be unramified outside {2, 3, 7}, and then so will be all the 
cocycles in Section 5.3. 

Case 1: [^] = . 

The twist has the form (5.4) for some a G Z>o. We need consider only a whose image in 
QX/QX7 ^ H^(^Q,/X7) is unramified outside {2,3,7}. Equivalently, the field Q(a^/^) should 
be unramified outside {2, 3, 7}. Concretely, this means that the only primes occurring in the 
factorization of a are among 2, 3, and 7. 

Case 2: [j] ^ . 
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The number field K must be unramified above all finite places outside {2,3,7}. By 
the Kronecker- Weber theorem, the only such cyclic cubic extensions are the four degree-3 
subfields of the (Z/3Z)2-extension Q(C + C"\C9 + Cg"^), where C = e^^^/^ (as usual) and 
Cq = e^-*/^ Let Ok be the rinsr of integers of K. The element a G must be such that 
K[a^/'^) is unramified above finite places outside {2, 3, 7}. Since each K has class number 1, 
it is possible to multiply a by an element of K^"^ to assume that a G (9i^[l/42]^. Then 
the element c of Case 2 of Section 5.4 lies in (9i^[l/42]^, and we can finally reduce to the 
finite group ((9/^[l/42]^/(97^[l/42]^'^)'^^^, generators for which are easily computed for each 
(i^,r). 

6. Irreducible 7-torsion: level lowering 

Now we list the possibilities for irreducible -^[7], up to quadratic twist. Let £ be the 
following set of 13 elliptic curves over Q in the notation of [Cremonal997]: 

24A1, 27A1, 32A1, 36A1, 54A1, 96A1, 108A1, 216A1, 216B1, 288A1, 864A1, 864B1, 864CL 

Lemma 6.1. Suppose that E is as in Lemma 4-6, and that E[7] is an irreducible Qq-module. 
Then there exists a quadratic twist E' of some E" G S such that E[7] ~ E'[7] as Qq-modules. 

Proof. By [Breuil2001], there is a weight-2 newform / on ro(A^) associated to E, where is 
the conductor of E. By Lemma 4.6, A^ = 2''3* IlperP ^'^^ some r < 6, s < 3 and finite set T of 
primes > 5. Let A^' = 2''3^. Since E[7] is irreducible. Theorem 1.1 of [Ribetl990] lets us lower 
the level of / by eliminating 7 (if present) and then the other primes > 5: more precisely, 
there is a weight-2 newform /' on ro(A^') such that "/' = / (mod 7)." The congruence is 
to be interpreted as follows: "The Z-algebra generated by the Fourier coefficients of /' is 
an order Of in some number field, and there is a prime ideal p G Of of norm 7 such that 
ap{f') mod p = ap{f) mod 7 for all but finitely many p." Replacing /' by a quadratic twist 
does not change Of. 

We now consult William Stein's Modular Forms Database [SteinTables] (or use Magma 
[Magma]), and get all weight-2 newforms /' of level dividing 2^3^. If two of them are 
quadratic twists of each other, we can check this by looking at sufficiently many coefficients, 
because the twisting factor is in {±1, ±2, ±3, ±6}, and the order of vanishing of a difference 
of modular forms at the cusp oo can be bounded in terms of its level. We find that each /' 
is a quadratic twist of one of 14 newforms /". Now 13 of these 14 newforms have Of/r = Z 
and are associated to the elliptic curves E" G S. (Warning: the labelling of isogeny classes 
of [SteinTables] is different from that of [Cremonal997] at some levels.) The 14*^ has Of 
an order containing a/13 in Q(a/13) (in fact it is Z[vT3]); such an order has no prime of 
norm 7, so we can discard this last newform. 

Thus f = f (mod 7) where /' is associated to an elliptic curve E' having a quadratic twist 
E" E £. By the Eichler-Shimura relation (see [Eichlerl954] for the relation in the context we 
need), the congruence implies that for all but finitely many p, the traces of the Frobenius au- 
tomorphism at p acting on E\7] and E'\7] are equal. By the Chebotarev density theorem, the 
^Q-representations E\7] and E'\7] have the same trace. They also have the same determinant, 
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namely the cyclotomic character. So the Brauer-Nesbitt theorem [Curtis-Reinerl988, The- 
orem 30.16] imphes that the semisimphfications of E\l] and E'\l] are isomorphic. But E\l] 
is irreducible and hence semisimple, so E\l] ^ E'\7] as ^Q-modules. □ 

Corollary 6.2. Suppose {a,b,c) G S'(Z) anda,b,c are nonzero. If E(^a,b,c)[^] is irreducible, 
then j = G X(1)(Q) is the image of a rational point on one of the 26 curves 

Xe{7) orX^{7) with E eS. 

Proof. Combine Lemmas 4.4 and 6.1. □ 



7. Explicit equations 

Each twist of X = X(7) is a nonhyperelliptic curve of genus 3, and hence has a model 
as a smooth plane curve of degree 4. In this section we find equations for the homogeneous 
forms defining the twists that we need, and also the equations for their canonical morphisms 
to P"*^ = X{1). The strategy is to exploit the 168 symmetries. 



7.1. Covariants of ternary quartic forms. The standard left action of CL„(C) on = 
C" induces a right action of GL„(C) on the C-algebra C[xi, . . . , Xn] = Sym V*. If G GL„(C) 
and E G C[xi, . . . , Xn], let E^ be the result of applying g to E, so E^{y) = E{^v) for all v eV . 
Let C[a;i, . . . , x^d = Sym'^ V* be the subspace of C[xi, . . . , x„] consisting of homogeneous 
polynomials of degree d. 

Fix n and d. A covariant of order j and degree 5 is a function \1': C[xi, ... ,Xn]d 
C[xi, . . . , Xn]j such that 

(1) The coefficient of a fixed monomial x^ ■ ■ - x^^ in '^[F^ depends polynomially on the 
coefficients of F, as E varies. 

(2) For each g G SL,,(C), we have ^(F^) = ^{py. 

(3) For each t G C^, we have ^(tF) = t^^{F). 

In the same way, a contravariantoi order j and degree 5 is a polynomial map * : Sym^ V* 
Sym-' V that is equivariant with respect to the right action of SL,i(C) on the two spaces and 
is homogeneous of degree 5 in the coefficients. (The right action of SL„(C) on V is the 
contragredient of the action on y*.) In other words, for all E G Sym'^y* and g G SL„(C) 
we have \E'(F^) = \E'(F)^ *, where g~^ is the inverse transpose of g. Our choice of basis for 
V induces an isomorphism — > y*, so we may express each contravariant as a polynomial 
in the same variables Xi, . . . , a:„. 

From now on, we take n = 3 and d = 4, and use x, y, z in place of Xi, X2, ^3. We will list 
some covariants, which we will call \E'o) ^4? ^6? ^14? a^^d \E'2i; and a contravariant, which 
we will call \E'_4. They will be of orders 0, 4, 6, 14, 21, 4 and of degrees 3, 1, 3, 8, 12, 2, 
respectively. 
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First of all, define \l/4(-F) = F. Then '^^{F) is essentially the Hessian of F: 



^>^{F) = - 



1 

54 



Q2p Q2p 



dx dy 

d^F 
dy^ 

d'^F 

dz dx dz dy 



dx dz 

a'^F 



dy dx 
92 F 



dy dz 

a'^F 

dz^ 



The constant —1/54 is there so that '^q has integer coefficients with gcd 1. Next, '^^{F) is 
obtained in a similar way: 

a^(i{F) 



d^F 


a'^F 


d^F 


dx'^ 


dx dy 


dx dz 


92 F 


a^F 


d^F 


dy dx 


dy'^ 


dy dz 


d^F 


a'^F 


d^F 
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d^e{F) 


d'feiF) 


a^6{F) 


dx 


dy 


az 



ax 

a^ejF) 

dy 
a^ejF) 

az 





And \l/2i(-F) is essentially the Jacobian determinant of the other three: 



^2l(F) 



1 

14 



dF 


dF 


dF 


dx 


dy 


dz 


d'faiF) 


d-^6{F) 


a-fe{F) 


dx 


dy 


dz 


d^i4{F) 


d^i4{F) 


d'fi4{F) 


dx 


dy 
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The invariant \l/o(-^) can be obtained as follows. Consider the following differential operator. 



D 



d 
dxi 

a 

dx2 

a 

dx3 



a 

dyi 

a 

dy2 

a 

dy-i 



a 

az\ 
a 

az2 
a 

az3 



Then 



1 



5184 



D'^iF^xi, yi, zi)F{x2, y2, Z2)F{x3, y^, z^)) . 



Alternatively, one can find an explicit formula in Salmon's book [Sall879, p. 264], where 
he gives also a formula for the contravariant \I^_4(F). We do not reproduce it here, but in 
Section 7.2 we will give the result for the special curves we will have to deal with. 

(The covariants do not generate the C-algebra of covariants, but they are all we will 
need. In fact, they do generate the specialization of the algebra of covariants for each ternary 
quartic GL3(C)-equivalent to x^y + y^z + z^x.) 

Let Fq = x^y + y^z + z^x be the polynomial defining X. Each g E G G GL3(C) must act 
on Fq as multiplication by a scalar, so there is a character x'- G ^ describing the action 
of G on Fq. But G is simple and nonabelian, so x is trivial. In other words, Fq belongs to 
C[x,y,z]^, the ring of G-invariants. For j G {0,4,6,14,21}, let $j = ^j(Fo) G C[x,y,z]j. 
Since is a covariant, $j G C[x,y,z]'^. In fact, the $j generate C[x,y,z]'^ as a C-algebra. 
Moreover, $0 = 1? the polynomials $4, $6? '^'14 are algebraically independent, and $21 can 
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be expressed as a polynomial in the others. We give this relation modulo $4, since this is 
all we need: 



(7.1) $^1 - = -1728 $0*6 (mod $ 



4 



Lemma 7.2. If F = Fq for some g E GL3(C), then 

^2i{Fy - ^u{Ff = -1728 <i!o{F)^e{Fy (mod F). 

Proof. Write g = tg' with t E and g' E SL3(C), and apply it to (7.1). The result follows, 
since the two sides of (7.2) are covariants of the same degree 24 and order 42. (This was the 
point of including the trivial factor $0 in (7.2).) □ 

Lemma 7.3. Let F = F^ for some g E GL3(C). No two of^^f^^F), "^ui^F), '^2i{F) vanish 
simultaneously at a point of the curve F = m P^. 

Proof. We may assume F = Fq, in which case the result is in [Klel879, §6]: see [Elkiesl999, 
p. 66]. □ 

7.2. Equations for Xe{7) and X^(7). In order to use Corollary 6.2, we need explicit 
equations for the 26 curves described there. Halberstadt and Kraus [Halberstadt-Kraus2003] 
find an explicit equation for Xe{7) in terms of the coefficients of E. If E is given as Y"^ = 
+ aX + b, the equation is 

(7.4) ax'^+7bx^z+3x^y^-3a^ x^z'^-6bxyz'^-5abxz^+2y^z+3ay^z^+2a^ yz^-4b'^ z"^ = 0. 

The following result will let us deduce an equation for X^{7) from (7.4), using very little 
additional work. 

Proposition 7.5. If F is a ternary quartic form describing X m' (7) , then \E'_4(F) is a ternary 
quartic form describing X^j,{7). 

Proof. Given M', the curve Xm'{7) can be constructed as follows. Fix a symplectic isomor- 

A 

phism (f): Mq ^ M^. Then a ^ = o defines a 1-cocycle on Qq with values in 
AutA(MQ). We have 

AutA(MQ) ^G = Aut(X^) ^ GL3(Q), 

in which the last homomorphism is the 3-dimensional representation {V^p) of [Elkiesl999, 
p. 54] giving the action of Aut(XQ) on the dual of the space of holomorphic differentials 
on X, and giving also the automorphisms of that restrict to the automorphisms of the 
canonically embedded curve X^. Under this composition, ^ maps to a cocycle ^ 
GL3(Q), which can be written as a t-^ g^^ ■ "g for some g E GL3(Q), since H^(^q, GL3) = 0. 
If ~ denotes "equal up to scalar multiple", then 

Fr)={^F,p~')=Ff^~'^Ff' 



since induces an automorphism of X-^. Thus Fq =0 defines a twist X' of X in P^. The 
cocycle — > Aut(XQ) defining this twist (obtained from the isomorphism — > XL given 
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by g) is the same as the cocycle defining XM'i7), so X' ^ Xm'{7)- After replacing F by 
for some b G GL3(Q) (which we may do, without loss of generality), we have Fq ~ F. 

The element l = {I \ ) defines an anti-symplectic automorphism of M over Q. A 
calculation based on the explicit description of {V, p) in [Elkiesl999, p. 54] shows that 
AutM^ — > GL3(Q) is equivariant with respect to conjugation by l on the left and g i— g~^ 
on the right. In particular, the image of G in SL3(Q) is stable under inverse transpose, so 
the contravariance of \l/_4 implies that \l/_4(-Fo) is a G-invariant ternary quartic form. All 
such are multiples of Fq [Elkiesl999, pp. 55-56], so ^_4(Fo) ~ Fq. 

Now we repeat the first paragraph of this proof using the anti-symplectic isomorphism 
(pL: Mq — > in place of (f), to construct X^^,(7). The image of the cocycle 

a ^ {(poy^ o "{(Pl) = r^^^L 

under Aut Mq GUiQ) is 

where h := g~^, so the polynomial defining X^^,(7) is 

□ 

A formula for \l/_4 is given in [Sall879, p. 264]. Applying it to (7.4), we obtain an equation 
forX^(7): 

(7.6) -a^ + a(3a^ + 196^) + 3 + 6a^ y^z^ + 6a - 6(a^ + 66^) x^y^ - Uaby^zx 
+ ISbz^xy + 2abx^y - 12b x^z - 2(4a^ + 216^) y'^z + 2a%y^x - Saz^y = 



7.3. Equations for the degree-168 morphism to P^. Recall that each twist X' of X = 
X{7) comes equipped with a canonical degree-168 morphism to = X{1) that is invariant 
under Aut(X^). The morphism with these properties is unique if we require that its branch 
points (with ramification indices 2, 3, 7) be at 1728, 0, oo, respectively, on P^. 

Lemma 7.7. Let X' be a twist of X defined by a ternary quartic form F . Then the canonical 
morphism is 

tt' : X' — > P^ 

^14(F)^ 



{x:y:z) 



where as usual we use the parameter j on P^. 



Proof. We need only to check this for X, in which case it is (2.13) in [Elkiesl999]. 
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7.4. The local test. Let X' be a twist of the Klein quartic X. Then X' is given by an 
equation F = 0, where F = E Q[x,?/, z]^ for some g G GL3(Q). By Lemma 7.7, there is 
a morphism vr' : X' — s> , given by 

We showed in Section 3.4 that every (a, 6, c) G S'(Z) maps to a point in 7r'(X'(Q)) for some 
twist X' whose class in H^^Qq^G) is unramified outside 2, 3, and 7. Now suppose we have 
such a twist. Then vr' extends to a morphism X^j ^ P)j, so 7r'(X'(Q)) = 7r'(X'(/2)) C ¥\{R), 
and the corresponding solutions to + = will have gcd(x, y, 2;) divisible by at most 
primes in {2, 3, 7}. For each of the remaining primes p = 2, 3, 7, we search for residue classes 
that give rise to p-primitive solutions. (We say that (x, z) in 1? or is p-primitive if at 
least one of x, y, z is not divisible by p.) 

Let us define a residue class in P^(Qp) to be a subset that, after permuting the homo- 
geneous coordinates, equals {(1 : a + p'^u : b + p^v) : u,v E Zp} for some fixed a,b E Zp 
and integers k,l > 0. We have an initial partition of P^(Qp) into the three residue classes 
(1 : Zp : Zp), (pZp : 1 : Zp) and (pZp : pZp : 1). For each given residue class, we rewrite F in 
terms of u and v. If this expression has the form p'^{a + pFi{u, v)) with a G Zp and e G Z, 
then the residue class does not meet X'(Qp), so we can discard it. Otherwise, we compute 
the covariants "^^IF), 14(F) and \E'2i(-^) in terms of u and v. The minimum of the p-adic 
valuations of the coefficients gives us a lower bound for the ]9-adic valuation of the covariants 
on our residue class, and if the constant term has the unique coefficient with minimal val- 
uation, we even know the p-adic valuation of the corresponding covariant exactly. Let Wq, 
Wi4 and W21 be these lower bounds for fp(\E'6(-^))) Vpi^^i^^F)) and Vp{'^2i{F')), respectively, 
and let w = Wp (1728^0 (^))- 

One of the solutions to + 6'^ = corresponding to the point [x : y : z) E X'(Q) is given 

by 

a = (1728^o(i^))'^2i(i^) , h = -(1728^o(i^))'^i4(i^) , c = -1728*o(i^)^6(i^) , 
evaluated at (x, z). This can be scaled to a p-primitive solution if and only if 

min{^;p(a)/21,t;p(6)/14,Wp(c)/6} G Z. 

So we define 

We = (1^6 + 3u;)/21 , wu = {Wii + 2w)/U, W21 = {W21 + w) /Q . 

If min{u;e, Wi^, u'21} is an integer and the minimum comes from a covariant whose valuation 

on the residue class is known exactly, then there will be a p-adic point on X' giving rise to a 

p-primitive solution (at least if the given residue class contains a p-adic point on X\ which 

we can check using Hensel's Lemma). In the same way, if min{i/;e, wi^, W21} is not an integer 

and the minimum comes from a covariant whose valuation on the residue class is known 

exactly, then no p-adic point in this residue class can produce a p-primitive solution. If the 

minimum comes only from a lower bound, we split the residue class into p (or p^) subclasses 
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and repeat. In this way, we can decide fairly quickly whether any given twist gives rise to 
primitive solutions everywhere locally. If so, we say that "X' passes the local test." 

This algorithm terminates, since by Lemma 7.3 no two of "^qIF), \Efi4(F) and \E'2i(-F) 
vanish simultaneously on X'{Qp). 

7.5. The list. Putting together the twists coming from the reducible and irreducible cases, 
respectively, we obtained an initial finite list of twists. We then ran the local test on each of 
the curves. There are exactly 10 twists that pass the local test. They are given in Table 2. 
We have put some effort into simplifying these equations (trying to minimize the invariant 
\&o(-^) and to reduce the size of the coefficients); the equations given are usually not those 
coming from formula (7.4) directly. 

Ci : 6x^y + y^z + z^x = 

C2 : 3x^y + y^z + 2z^x = 

C3 : 3x^y + 2y^z + z^x = 

C4 : 7x^z + Sx'^y^ - 3xyz^ + y^z-z^ = 

65 : —2x y — 2x z + 6x yz + 3xy — 9xy z + 3xyz — xz + 3y z — yz = 
Cq: x^ + 2x^y + 3x^y'^ + 2xy^ + lixyz^ + 9y^z^ - 9^^ = 

^ /I Q 00 O OOi"? OjQ 00 Q 

67 : — 3x — Qx z + Qx y — 6x yz + 15x z — Axy — 6xyz — Axz + 6y z — 6yz = 
Cs : - x^y - Ux^y'^ + Sx^z^ - 5xy^ - Qxy^z + 2xz^ - 2?/^ + Qy^z + 3y^z^ + 2yz^ = 

^ A , o -Q 00 O 00 Q O /I Q 

Cg : 2x + 4a: y — 4x z — 3x y — 6x yz + 6x z — xy — 6xyz — 2y + 2y z 
- 3y'^z^ + Qyz^ = 

Cio : x^y - x^z + 3x^z^ + 3xy^z + 3xyz^ + 3xz^ - y^ + y^z + 3y'^z'^ - 12yz^ + = 
Table 2. Equations for the plane quartic curves Ci through Ciq. 



Curves Ci, C2, and C3 come from the case that E[7] is reducible. As it happens, they all 
correspond to twists that involve only the cyclic subgroup of order 7. Curves C4 through Ciq 
are of the form Xe{7) for E = 27A1, 96A1, 288A1, 864A1, 864B1, 864C1, 54A2, respectively. 
(The curve Cio is also X^{7) for E = 54A1, because 54A1 and 54A2 are 3-isogenous, and 3 
is not a square modulo 7.) 

7.6. Local conditions for C5. If Pi, P2 E P^(Qp) then we write "Pi = P2 (mod p)" to 
mean that the images of Pi and P2 under the reduction map P^(Qp) = P^(Zp) — > P^(Fp) are 
equal. Define 



C5(Q2)subset 
^^5(03) subset 
C5(Q)subsct 



{ P G C5(Q2) : P = (1 : : 0) or (1 : 1 : 1) (mod 2) } 
{PgC5(Q3):P = (0:1:0) (mod 3) } 
{Pe C5(Q) :Pg C5(Q2) subset 

and P G C5(Q3)subsct }• 
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Lemma 7.8. Let p be 2 or 3. If P e C^iQp) and the image of P in P^Qp) is in j{S{Zp)), 
then P G C5(Qp)subset- 

Proof. We do the computations for the "local test" , keeping track of the residue classes that 
are not excluded. For example, when p = 3, the reduction mod 3 of the equation ^5 = 
of C5 is 

[x — z){x y + y z + xyz + xz + yz ) = , 
which describes a line and a cuspidal cubic intersecting at the cusp (0:1:0). The invariant 
\E'o(-^5) equals —24, so in the notation of Section 7.4, w = 4. For all residue classes corre- 
sponding to smooth points on the reduction, we find that the minimum of Wq, Wu and W21 is 
determined and non-integral. So (0 : 1 : 0) is the only residue class that may contain points 
leading to 3-primitive solutions. The argument for p = 2 is similar. □ 

Because of Lemma 7.8, it will suffice to determine C5(Q)subset instead of C5(Q). Eventually 
we will prove C5(Q) subset = 0- 

8. Known rational points on the 10 curves 

We can forget most of the paper up to now. All we need to keep are the equations for Ci 
through Cio, the local conditions for C5 given by Lemma 7.8, and the formula in Lemma 7.7. 
(The latter is needed only to recover the solutions to x"^ +y^ = z'' from the relevant rational 
points on the 10 curves). 

Table 3 gives the rank of the Mordell-Weil group of the Jacobian of each curve (these 
numbers will be proved correct in Section 11), and lists rational points on C\ through Cio 
discovered by a naive search. We will prove that the list is complete for each curve except 
possibly Cs.^ For C5, we will prove instead that C5(Q)subsct = 0, which will suffice for our 
purposes. If we prove all this, then Theorem 1.1 will be proved. 

For each rational point. Table 3 next gives the corresponding value of j : Cj — > calculated 
by Lemma 7.7. If j ^ {1728,0, 00}, it gives also the Cremona label for an elliptic curve of 
that j-invariant, and all primitive solutions (a, 6, c) to + 6^ = cJ with 1728 = j. If 
the conductor is out of the range of Cremona's database, we use A^* as a substitute for 
the Cremona label. 

Remark 8.1. The last two points on are interchanged by the involution z ^ —z of Ce, 
and hence map to the same j-invariant. 

9. Overview of the strategy for determining the rational points 

In order to determine the sets of rational points on Ci, . . . , Cio, we will need to determine 
the Mordell-Weil ranks of their corresponding Jacobians Ji, . . . , Jio over Q. The curves Ci, 
C2 and C3 are /ly-twists of X rather than more general twists. So there are more methods 
available for dealing with them than for the other curves. 

^Almost certainly the list is complete for C5 too, since Noam Elkics ran an algorithm based on his 
paper [ElkiesANTS4] to prove that there are no additional points (x : y : z) with integer homogeneous 
coordinates satisfying |x|, |y|, \z\ < 10^. 
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Rank 


Points 


j-invariant 


L-remona 


Primitive solutions 


Ci 


1 


(1 


: : 


0) 


00 




(±1,-1,0) 






(0 


: 1 : 


0) 


00 




(±1,-1,0) 






(0 


: : 


1) 


00 




(±1,-1,0) 






(1: 


-1 


:2) 


-13322117332-23-143-^ 


258F2 





C2 


1 


(1 


: : 


0) 


00 




(±1,-1,0) 






(0 


: 1 : 


0) 


00 




(±1,-1,0) 






(0 


: : 


1) 


00 




(±1,-1,0) 






(1: 


1 : 


-1) 


-7^2-13-^ 


294A1 








(1 : - 


-2 : 


-1) 


—13 26293 2 3 113 


678D2 






i 


(1 


: : 


0) 


00 




(±1, -1,0) 






(0 


: 1 : 


0) 


00 




( _i_ 1 1 n\ 

(±1, -1,0) 






(0 


: : 


1) 


00 




(±1, -1,0) 






(1: 


1 : 


-1) 


—7 44647 2 3 29 








2 


(1 


: : 


0) 







(±1,0,1) 






(0 


: 1 : 


0) 







(±1,0,1) 






(0 


: 1 : 


1) 


-2^^3 ■ 53 


27A2 




C5 


3 


(1 


: : 


0) 


26]^333-i 


96A2 








(0 


: 1 : 


0) 


2^2333-'' 


96A4 








(0 


: : 


1) 


289733-1 


96A3 








(1 


: 1 : 


1) 


2^733 ^ 


96A1 




Ce 


2 


(0 


: 1 : 


0) 


2^33 




±(0,1,1) 






(1: 


-1 


:0) 


2^33 




±(0,1,1) 






(0 


: 1 : 


1) 


2^^33113421^113"'^ 


32544* 


(±15312283, 9262, 113) 






(0: 


1 : 


-1) 


2^33ll342l3ll3"'^ 


32544* 


(±15312283,9262, 113) 


C7 


2 


(0 


: 1 : 


0) 


-2333 


864A1 








(0 


: : 


1) 


2^3373l0l35-'^13"'^ 


56160* 


(±2213459, 1414,65) 






(0 


: 1 : 


1) 


— 2'^3'^13'^5867'^17 ' 


14688D1 


(±21063928, -76271, 17) 




2 


(0 


: : 


1) 


-2^33 


864B1 


(±3,-2,1) 






(2: 


-1 


:0) 


2 6 ■ 547 66029 977 


844128^ 




c. 


2 


(0 


: : 


1) 


2^3 


864C1 








(1 


: 1 : 


0) 


233^1633877937-^79-^ 


477792* 






2 


(1 


: : 


0) 


-331732-^ 


54A3 


(±71,-17, 2) 






(1 


: 1 : 


0) 


-3 ■ 7332-9 


54A2 





Table 3. Known rational points on C\ through Cio- 



First observe that each of these three curves is a Galois cover of P , over Q, with Galois 
group /iy; in fact, Ci, C2 and C3 are birational to the (singular) projective plane curves 

vJ = v^i^v — vj)w'^ , viJ = v^^y&v — vS)w^ and = v^{yiv — vS)w^ ^ 
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respectively. To see this, rescale and/or permute the variables to obtain an equation of the 
form x^y + if'z + Az^x = (with A = 6, 18, 12); then {u : v : w) = {xyz : —z^ : x'^y) does 
the transformation. 

The curves (and their Jacobians) are therefore amenable to the techniques developed by 
Schaefer [Schaeferl998] and Poonen and Schaefer [Poonen-Schaeferl997]: the Jacobians have 
complex multiplication by 1j[Q. We will do a 1 — C descent for each of these Jacobians. 

For C4, . . . , CiQ, we need to develop a new method of determining the Mordell-Weil ranks 
of their Jacobians over Q. We do this in Section 11. 

For the curves Ci, . . . , Cio other than C5, the rank of Ji(Q) is less than 3, the dimension of 
Jj. In each case, a combination of Chabauty and Mordell-Weil sieve computations determines 
the set of rational points (see Section 12). For C5, the rank of J^i^Q) is 3, so we will deal 
with that curve separately in Section 13.1. 

10. (1 - C)-DESCENT ON Ji, J2, AND J3 

We now do a descent using the endomorphism 1 — C of Jj over L := Q(C) for i = 1, 2, 3. 
See [Schaeferl998] and [Poonen-Schaeferl997] for details. The descent map is given by the 
function f = v/w and takes values in 

H = L({2,3,7},7) = {ee LV^""^ : L{Ve)/L is unramified outside {2,3,7}}. 

The group H is an F7- vector space of dimension 7. 

For each prime p of L, let pp be the composition H ^ / L^'^ L^/L^"^. Let ir = 
1 — ( ^ L. Let q be a prime of L above 2. For each i, we found that 

in particular the intersection is of dimension 2. In addition, we found two independent 
elements in Jj(L)/(l — ()Ji{L). Therefore, the Selmer group S^~''{L,Ji) and Jj(L)/(l — 
()Ji{L) are of dimension 2. Since dim Jj(L)[l — Q = 1, the rank of Jj(Q) is 1. 

For i = 1, 2, 3 and p G {it, q}, we found a basis of Jj(Lp)/(l — C) Jj(Lp) consisting of divisor 
classes of the form [P — 00] or [P + P — 2oo] where 00 is the single point with w = and P 
is defined over Lp, or P is defined over a quadratic extension of Lp and P is its conjugate. 
In Table 4 we describe each such divisor class by giving the value oi v/w at P. The last 
column of Table 4 does the same for Jj(L)/(l — QJi{L). 

For each z, we have Ji[l - C] ^ ^i(Q) and dim J(Q)[7] = 1, so dim Ji(Q)/7Ji(Q) = 2. We 
will use this in Section 11.2. 

10.1. Side application to twists of the degree-7 Fermat curve. Our calculation of 
Ci(Q), C2(Q), C3(Q) will have consequences for rational points on certain curves ciX^ + 
02^^ + c^Z'^ = in P^. These are not needed for the proof of our main theorem, but are of 
interest in their own right. 
A rational point on a curve 

= v'^{Av — w)w'^ , 
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i 


J ( T \ 


~T { T \ 


Ji{L) 




(1 - OMLn) 


(1 -C)J:/(i^q) 


(1 -C)Ji(^) 


1 





-1/2 







(3 + Gtt^ + 27r^)/6^ 




-1/2 




(3 + TT^ + Stt^ + 7r^)/6^ 








7r'(l + Stt'^ + 57r')/6^ 






2 


1/27 


1/27 







7r^(l + 37r^)/864 




1/27 




(4 + 7r4)/864 








(4 + 7r^ + 7r5)/864 






3 





1/8 







7r^(l + 7r6)/1944 




1/8 




(3 + VSvr^ + 7r7y3)/1944 








(2 + 7r3/2 + 7r5/2 + 37r3 + tt^/^ 








- TT^ + 7r9/2 + 27r5 + 27r6)/1944 







Table 4. Data needed for (1 — (^)-descents for Ci, C2 and C3. 



can be represented hy u,v,w G Z with gcd(w,w) = 1. Then gcd(w, At; — w) = 1] therefore 
there exist integers a,b,r,s,t such that 

t> = r , At> — w = as'^ , w = fet'', 

and is a 7**^ power, and a and 6 are divisible only by primes dividing A. Therefore, we 
obtain a point on the covering curve 

Ar'^ - a/ -bf = 0. 

Conversely, a rational point on this curve maps down to a rational point on the original 
curve. 

Section 12 determines the rational points on = v'^{Av — w)w'^ for A = 6, 12, 18. As- 
suming this, we can list the rational points on the covering curves arising from these. After 
simplifying their equations (by multiplying by constants, and making the coefficients 7*^^- 
power free), and eliminating those that over some Qp fail to have points, we obtain the 
following: 

Corollary 10.1. The following curves in Pq have Qp-points for all p < 00, but the only 
rational points are the ones with X,Y, Z ^ {"1? 0? I}-' 

X^ + r^ + 12Z^ = 0, X^ + F^+ 18Z^ = 0, X^ + r^ + 48Z^ = 0, 



X^ + r^ + 144Z^ = 0, X^ + F^ + 162Z^ = 0, + + 324 = ^ 

X^ + 2rV3Z^ = 0, X^ + 2F^ + 81Z^ = 0, X^ + 3 + 4 = , 

X^ + 3r^ + 16Z^ = 0, X^ + 4r^ + 9Z^ = 0, X^ + 9F^ + 16Z^ = 0; 

X^ + 16F^ + 81Z^ = 0. 
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11. 2-DESCENT ON JACOBIANS OF TWISTS OF X 



11.1. Theory. To compute the ranks of J4{Q) , ■ ■ ■ , Jio{Q) , we will use the 2-descent de- 
scribed in this section. It is similar to the descent described in [Poonen-Schaeferl997]. 

The Klein quartic X has 24 Weierstrass points, each of weight 1 (ordinary flexes). These 
can be partitioned into eight sets of three with the following property. Choose one set of three 
and denote the points Wi, W2, W3. The tangent line at Wi intersects X with multiplicity 3 
at Wi and multiplicity 1 at PVj+i (with subscripts considered modulo 3). We will call such a 
set of three Weierstrass points a triangle. The set of eight triangles is a Galois-stable set. 

By abuse of notation, let Tj denote both a triangle and the effective degree-3 divisor that 
is the sum of its points. For 1 < ? < j < 8, we can find a function with divisor 2Tj — 2Tj 
whose numerator and denominator are cubics. Therefore the divisor class [Tj — Tj] is killed 
by 2. Since the points in each Tj are not coUinear, an application of the Riemann-Roch 
theorem shows that Tj — Tj is not principal. Thus the order of [Tj — Tj] is exactly two. 

Proposition 11.1. The [Tj — Ti] for i = 1, . . . , 8 sum to 0, and any six of them with i ^ 1 
form a basis for Jac(X) [2] . Let Qi = [Yl^=i cuTi] and Q2 = [Yl^=i ^iTi] with ^ Oj = ^ fej = 0. 
Let 62 be the 2-Weil pairing. Then e2{Qi,Q2) = (— 1)^^=1 ''^^v 

Proof. Over some finite and totally ramified extension of Q7, the Klein quartic X acquires 
good reduction and has all its automorphisms defined. So if Ok is the valuation ring of K, 
then X extends to a smooth curve over Ok- The special fiber X^ is the hyperelliptic curve 
branched above the eight points in P^(F7). Then Ant{X) injects into Aut(Xs) and injects 
into the automorphism group of Pj.^, which is isomorphic to PGL2(F7) (see [Elkiesl999]). At 
a Weierstrass point VFj of X, there is a regular differential vanishing to order 3 (it corresponds 
to the tangent line in the canonical model). One can scale the differential by an element of K 
so that it extends to a regular differential on the model X over Ok, and reduces to a nonzero 
differential on Xg, vanishing at least to order 3 at the reduction of the point. This means 
that Weierstrass points of X reduce to Weierstrass points of the hyperelliptic curve Xg. 

The differential in characteristic has divisor 3Wi + VFj+i, where Wi, VFj+i are two points 
in a triangle. The reduction must be 3Wl + Wl_^_i where W-, Wl_^_i are Weierstrass points. But 
the only possibility for Wl_^_i that makes this the divisor of a differential on the hyperelliptic 
curve is VFj+i = W^. Repeating this argument shows that the points of a triangle all reduce 
to the same Weierstrass point on Xg. Applying the automorphisms, and using the fact that 
PSL2(F7) acts transitively on the set P^(F7) of hyperelliptic branch points for Xg, shows that 
the eight triangles reduce to the eight Weierstrass points on Xg. Now the 2-torsion point 
[Tj — Tj] reduces to the 2-torsion point [3Pj — 3Pj] = [Pi — Pj] where Pj (for example) is the 
reduction of any point in Tj. The map Jac(X)[2] Jac(Xs)[2] is an isomorphism of groups 
preserving the Weil pairing, because X has good reduction. 

The desired statements for X and the Tj now follow from their analogues for the genus-3 
hyperelliptic curve Xg and its Weierstrass points, which are well known (cf. Propositions 6.2 
and 7.1 in [Poonen-Schaeferl997]). □ 
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This correspondence between X with its Tj and a genus-3 hyperelhptic curve with its 
Weierstrass points will enable us to translate many of the results in [Poonen-Schaeferl997] 
to our situation. That article involves descent on cyclic covers of the projective line us- 
ing ramification points of the covering. For hyperelhptic curves, these are the Weierstrass 
points. In this section, for brevity, we will sometimes cite an equivalent proof in [Poonen- 
Schaeferl997] which is easily translated. First we need to find a function corresponding to 
the a; — T map in [Poonen-Schaeferl997]. 

Let C be a twist of X with a rational point P G C(Q). In addition, assume that for each 
triangle Tj, there is a cubic whose intersection divisor with C is 2Tj + 3P + i?j where Ri is an 
effective divisor of degree 3, defined over Q and supported on three non-coUinear Q-points. 
A calculation shows that this holds for C4, . . . , Ciq. Let J be the Jacobian of C. 

Choose functions /i, . . . , /§ with div(/j) = 2Tj + 3P + Ri — 3Q (where is a canonical 
divisor defined over Q) and such that if cr G Qq, and ""Tj = Tj then "/i = fj- Then 
div(/j//j) = 2Tj — 2Tj + R^ — Rj. Since 2Tj — 2Tj is principal, so is Ri — Rj. The Ri are 
effective, of degree 3, and are supported on three non-collinear points. The Riemann-Roch 
theorem then implies that Ri = Rj. Let R be the common value of the Ri. 

Let T = {Ti}f^i. Let be Q or Qp (we allow p = 00, in which case Qp := M). Let be 
the algebra of maps from T to K. The group Qk acts on Ak through its action on T and K. 
Let Ak be the algebra of ^^-invariants in Ak] it is isomorphic as ii'-algebra to a product 
of finite extensions of K corresponding to the ^/^-orbits of T. We call D a good divisor if 
it is a divisor of degree 0, defined over K, whose support is disjoint from the support of 
div(/i) for every i. If D is a good divisor, then we define f{D) = {Ti i— > fi{D)). Then / is 
a homomorphism from the group of good divisors to A^. The divisor of each fi is the sum 
of a double and a Q-rational divisor. So by Weil reciprocity, / sends good principal divisors 
to A^K^ . Since C has a rational point, every element of J[K^ is represented by a good 
divisor. Therefore, / induces a well-defined homomorphism /: J[K) /2J[K) A^/A^K^. 
In order to determine the kernel and image of this map, it will help to find a cohomological 
interpretation of it. 

Let /if^ be the 2-torsion in A^; it equals the ^i^-module of maps from T to yU2- Let ^1^/112 
be the quotient by the set of constant maps. Let q be the canonical surjection /i^ — > /i^//i2. 
Define e: J[2] — > /i^//i2 by e{Q) = {Ti 1— > e2{Q, [Tj — Ti])). Let N : /i^ — > /i2 be the restriction 
of the norm map Ak K. A straightforward computation involving Proposition 11.1 shows 
that the following is a commutative diagram of ^ic-modules with exact rows and columns. 



fJ'2 



T 
/^2 



N 
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We now compute the long exact sequences of ^A'-cohomology for the rows and columns. 
Since R^Gk^K'') and H^(^i^, Z^) are both 0, we have /^2) ^ A'V^^^ g^nd /i^) ~ 

A^/A^ by Kummer isomorphisms. We obtain the following diagram with exact rows and 
columns. 

J{K)/2J{K) K^'/K''^ 




Al/Af^^K^'/K 



^\Qk. f ) ^ ^ H^(fe, J[2]) — H^^^, i) ^ Rx/K 



Bt{K)[2] 

The map q' is the composition of the Kummer isomorphism of A^/A^^ with H^{Qk, 1^2) 
the map induced by q. The map 6' comes from taking cohomology of 

— > J[2] — yJ^J — ^ 0. 

Proposition 11.2. The maps e o S' and q' o f are the same as maps from J[K) /2J[K) to 
{G K , / ^2) (i-e., the diagram above commutes). 

Proof. Pick an element of J{K). Since C has a rational point, that element is represented 
by a good divisor D. Pick D' G DivC^^ whose support is disjoint from the supports of the 
div(/i) and such that 2[D'] = [D]. Then 5'{[D]) is the class of the cocycle a ^ ["D' - D'] in 
E^Qk, J[2]). So e o S'{[D]) is the class of the cocycle := (T^ ^ CaQ"/^' - D'], [T^ - Ti])) 
in H^(^;^, /i^//i2). Let g he a function, defined over K{D'), whose divisor is 2D' — D. Then 
divi^'g/g) = 2(<^D' - D'). We also have div(/i//i) = 2{Ti - Ti). By definition. 

Therefore, we have 

{f,/f,)i-D'-D') 
{'^g/g){T,-T,) 

For each i, the divisor E = 2Ti — div(/j) is the same. Let / = g(E). By Weil reciprocity, 
the square of r]a '■= fii'^D' — D'){^g j g){—Ti) "^l/l is 1, so ?7o- G /i2- Since is in the quotient 
/ f^2, we can multiply the expression for by the constant map (Tj r]^) to get 

, fd'D' - D')in \ ,„ , , , 

where v = f,{D')l/g{Ti). Now 



f,{2D') /,(div(^) + J) 
g{2T,-E) ^?(div(/,)) ' 
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by Weil reciprocity. It follows that is the image of f(D) under q', since q' is the composition 
of the Kummer map A^/A^^ — > H^(^i^, /i^) and q, the map induced by the quotient map. □ 

Proposition 11.3. We have 6'{[R - 3P]) = S{-1). 

Proof. By definition of i? = -Ri, 2Ti + 3P + R is the intersection of C with a cubic, and hence 
is linearly equivalent to the intersection of C with any other cubic, which we may take to 
be the union of the tangent lines at the three points of Ti. Thus [2Ti + 3P + R] = [4Ti], so 
[R-3P] = [2Ti-6P]. Therefore S'{[R-3P]) is the class including the cocycle (a ^ ["Ti-Ti]) 
in R^Gk, J[2]). From Proposition 11.1, we have e([Ti - Ti]) = ''M - M e where M is 
the map sending Ti to 1 and Tj to —1 for i > 1. Also N{M) = — 1. Hence, by definition, 
5(-l) is the class of the cocycle (a ^ [''Ti - Ti]) in B^{Qk, J[2\). □ 

Proposition 11.4. The kernel of f : J{K)/2J{K) A^/A^^K'' is generated by [R-3P]. 
This element is trivial in J{K)/2J{K) if and only if the Qx-set T has an orbit of odd size. 

Proof The maps 6': J{K)/2J{K) B^Gk, J[2]) and q' : A^/AfK'' H^(^x, /iJ//X2) are 
injective. By Propositions 11.2 and 11.3, 

ker/ = {Sr'i^ere) = (5')-'(5(-"2)) = (ST^S' {{[R - 3P]))) = {[R-3P]), 

The proof of the second half of the proposition is essentially identical to the proof of 
[Poonen-Schaeferl997, Lemma 11.2]. □ 

To simplify notation, we let A = Aq and Ap = Aq^. In Section 11.2.1 we will show how 
to compute the ^Q-orbits of T; it will turn out that for each of C4, . . . , Cio, there is no orbit 
of odd size. Therefore, the kernel of the map / from J(Q)/2J(Q) to A^ /A^'^Q^ has size 2 
and is generated by [R — 3P] . 

Let A J]^ y4j where the Ai are number fields. Let p be a prime of Q. Let a be an element 
of A^ and its image in A^. We say that a G A^ /A^'^ is unramified at p if for each i, 
the field extension Ai{y/ai)/Ai is unramified at primes over p. Let be a set of places of 
Q including 2, the infinite prime, and all primes at which J has bad reduction excluding 
the odd primes at which the Tamagawa number is odd. Let {A^ /A^'^Q^)s be the image in 
^x^^x2qx q£ ^YiQ elements of A^ /A^"^ that are unramified outside of primes in S. 

Denote by H the kernel of the norm from {A^ /A^^Q^)s to Q^/Q^^. 

Proposition 11.5. The image of f : J{Q) A^ /A^'^Q^ is contained in H. 

Proof. The divisor of / is the sum of the double of a divisor and a rational divisor. This 
was the condition necessary for the proofs of the essentially identical results in [Poonen- 
Schaeferl997, Props. 12.1 & 12.4]. The exclusion of primes with odd Tamagawa numbers is 
explained in [Schaefer-Stoll2004, Prop. 3.2]. □ 
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Let p be a prime of Q, finite or infinite. We have the following commutative diagram 



J(Q)/ker(/) 



J(Qp)/ker(/p 



H 



fp 



Pp 



where fp is the map / for the case K = Qp, and pp is the composition H ^ /A 

Recall that the 2-Selmer group Sel^( J, Q) is the set of elements in H^(^(q, J[2]), unramified 
outside S, which map to the image of J(Qp) H^(^Qp, J[2]) for all p E S. Define the fake 
2-Selmer group to be 

{eeH\ pp{e) e 



SelLe(^, Q) = {9eH\ pp{9) e fiAQp)) for all p e S} . 
Proposition 11.6. The sequence p2 Sel^(J, Q) — ^ Self3^i^j,( J, Q) — > exact. 
Proof. See the proof of [Poonen-Schaeferl997, Thm. 13.2]. 



□ 



Cio, we find that S'{[R — 3P]) is nonzero. By Propositions 11.3 



1 + dimw2 Selfake(<>^, 



For the curves C4, . . 
and 11.6, dim^^j Sel^(J, 

To compute Selfa^]jg(J, Q), we first find A. Let A be a subset of {1, ... , 8} such that the set 
{Tj}jfz\ contains one representative of each ^Q-orbit of T. Let Aj = Q(Tj). Then we can 
find an isomorphism 

jeA 

The composition of / and this isomorphism is YljeA fr 

Next we find a basis of (A^/A^^Q^)^; an algorithm for doing this is given in [Poonen- 
Schaeferl997, §12]. To find a function fj, we find a cubic form defined over Aj, with the 
property that the curve defined by the cubic meets C at P with multiplicity (at least) 3 and 
at each of the three points of Tj with multiplicity (at least) 2. The jth component of / can 
then be taken to be this cubic divided by any cubic form defined over Q (for example, z^). 



Then we find a basis for each J(Qp)/ ker(/). It helps to know the dimension in ad- 
vance. For p odd, we have #J(Qp)/2J(Qp) = #J(Qp)[2]. We also have #J(Q2)/2J(Q2) = 
2^#^(Q2)[2] and #J(M)/2J(M) = #J(M) [2]/23 (cf. [Poonen-Schaeferl997, Lemma 12.10]). 
We can use Proposition 11.4 to determine whether J(Qp)/ker(/) has the same or half the 
size of J(Qp)/2J(Qp). Then we determine the intersection of all Pp ^(/(^(Qp))) for p E S. 
That intersection is equal to Selfa^],-j,( J, Q), which in our cases is half the size of Sel^( J, Q). 

We have 

dimSel2(J,Q) = rank J(Q) + dim J(Q)[2] + dimLQ(J, Q)[2] . 

In each of our cases, the number of independent elements we found so far in 
equals dim Sel^( J, Q), so LQ(J,Q)[2] = 0. Subtracting dim J(Q)[2] gives us rank 
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11.2. Results. In this section we use the 2-descent developed in the previous section to 
determine the ranks of Ja^Q), . . . , Jio(Q)- In each case, we find that ^(/('^«(Q2)/ker /)) 
is the same as the image of the subgroup of Jj(Q) generated by the known rational points. 
Therefore, in each case, Selfai^g( Jj, Q) = P2 ^(/('^j(Q2)/ker /)). Recall that in each case, the 
^Q-set T has no orbit of odd size, so the dimension of Sel^(Ji,Q) ~ MQ)/2Ji{Q) equals 

l + dimSelLe(^^,Q)- 

11.2.1. Computing the rank 0/ J4(Q). In this section, we give a detailed description of the 
computation of the rank of Ji{Q). For the curves C5, . . . , Cio, we give only the data necessary 
to check the computations in Table 5. 

Let g{x, y, z) = be the model of C4 given in Table 2. For any smooth plane curve, the 
fiex points are the points on the curve where the Hessian vanishes. We dehomogenize both 
g and the Hessian with respect to z and get two polynomials in u = x/z and v = y/z. We 
compute their resultant to eliminate v, and get hQ{u)his{u) where 

and 

hsiu) = 343m^^ + 23667m^^ + 127743m^2 + 72128m^ - 29379m^ + 2184 + 1 

are irreducible. This tells us that the ^Q-orbits of triangles will be of size 2 and 6. To 
determine a polynomial giving us the field of definition of a triangle in the size-2 orbit, we 
begin by taking a zero ui of h^, and solve the equations given by g and its Hessian to find 
an explicit t^i G Q{ui) such that {ui,vi) is a fiex; let Ti be the triangle it belongs to. We 
then construct the tangent line to C4 at this fiex to find the next point in Ti and repeat 
once more to find the third point of Ti, expressing all coordinates as rational functions of ui. 
The sum of the three w-coordinates must lie in the (quadratic) field of definition Q(Ti) of 
Ti, and this sum is found to generate Q(\/— 3), so Q(Ti) = Q(a/— 3). A similar computation 
with a zero of /iig shows that if T2 is a triangle in the other orbit, then Q(T2) = Q(vl89). 
So A ~ Q(a) X Q(/5) where a = and f5 = ^^189. Let S = {00, 2, 3, 7}. The subgroup 
of Q(Q;)^/Q(a)^^ that is unramified outside S has basis { — 1, 2, rii, 77,2, ns} where 

a + 5 —a + 5 

77,1 = a , 712 = , ^3 = — ^ — • 

Their norms are 1, 4, 3, 7, 7, respectively. The subgroup of Q(/?)^/Q(/5)^^ that is unramified 
outside S has basis {—1, 62, £3, £4, rui, 1712, m^, m^, 7/15} where 

£2 = ^if3' - 3/5^ + 3(3^ + 9/32 - 45/3 + 27) , 63 = ^iP' + 3/3^ + 3/3^ - 9(3^ - 45/3 - 27) , 
54 54 

£4 = kf3' + 15) , mi = -3-(-/3^ - 6/32 + 9(3- 36) , 
18 

m2 = 7^(-/3' - 3p^ + 9/32 + 18/3 + 81) , ma = -^(/3^ + 3/3^ + 3/3=^ + 27/3^ + 9/3 + 81) , 
54 54 

m4 = + 3/33 + 9/32 + 36/3 - 27) , m, = ^{(3' - 9(3) . 

54 18 
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Their norms are 1, 1, 1, 1, 64, 64, 64, —48, 7, respectively. 

Now let us find the image of (-1, 2, 3, 7) C Q>< in j A^'^ . In Q(a) we have 

2 = 2, 3 = —o? , 7 = n2n3 . 

In Q(/5) we have 

2 = — m]"'^m2m3 , 3 = e^^m]^^ml and 7 = e^ml . 
So in AV^'^^Q'' we have 

-1 = (-1,-1), 2 = (2, -mimsmg) , 3 = (-1,54), 7 =(77,277,3, £4) 
are all trivial. So (A^/A^^Q^)s has basis 

{(-1, 1), (?7i, 1), (?72, 1), (1,£:2), (1,£:3), (1,"^2), (1,^3), (1,"^4), (1,"75)} • 

These have norms 1,3,7,1,1,64,64,64,-48,7, respectively. So the kernel H of the norm 
from this group to Q^/Q^^ has basis 

{(-1, 1), (772, ms), (1,52), (1,^:3), (l,"7i), (l,m2), (1,^3)} . 

This group H contains the fake 2-Selmer group. 

Now we must find the function /. We will express / as a pair (/2, /e), where /2 is defined 
over Q(v^— 3) and /g is defined over Q(vl89). By linear algebra, we can find a cubic 
f2{x,y,z), defined over the field Q(mi), with the property that the intersection divisor of 
/2 = with g = includes 2Ti + 3(0 : 1 : 1). We can scale the solution in such a way that 
the coefficients lie in the field Q(V— 3). We get 

f2{x,y,z) = 238x^ + 84x\ + (9a + 3)xy2 + {12a + 4)y^ + {21a - 21)x'^z - {57a + 33) xyz 

+ (-12a + 24)y^z + (42a - A2)xz'^ + (-6a + 12)yz^ + (6a - 40)^^ . 
Doing the same for T2 yields 

f6{x, y, z) = 2142 x^ + (-51/3^ + 1071/3 + 756)x\ + (4/3^ + 42/3^ - 21/3^ - 882/3 + 189)x^z 
+ (-8/3^ - 9/3^ + 189)xy^ + (8/3^ + 6/3^ + 57/3^ - 126/3 - 1323)xyz 
+ (2/3^ + 6/3^ - 42/3=^ - 126/3 + 378)xz2 + (-12/3^ + 252)y=^ 
+ (2/3^ - 9/3^ + 12/3^ + 189f3)y'^z + (-6/3^ + 6/3^ + 6/3^ - 126/3)2/^^ 
+ (4/3^ + 3/3^ - 6/3^ - 63/3 - 252)2^ . 

To compute Self3^]^j,( J4, Q), we first do global computations. Since the ^Q-orbits of the 
8 triangles have sizes 2 and 6, we have dimJ4(Q)[2] = 1. Since no orbit has odd size. 
Proposition 11.4 gives 

dim J4(Q)/ker(/) = dim J4(Q)/2 J4(Q)-1 = dim J4(Q)/2J4(Q)-dim J4(Q) [2] = rank J4(Q). 

The image in H, under /, of the subgroup of Ja{Q,) generated by the three known rational 
points is ((—772, 7775), (1, £2))- SorankJ4(Q) > 2. 

The eight triangles break into four ^Qj-orbits of size 2. Each pair is conjugate over 
Q2(v^)- Therefore, we have dim 74(02) [2] = 4 and dim J4(Q2)/2 J4(Q2) = 7. Since there 
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is no orbit of odd size, Proposition 11.4 gives dim J4(Q2) / ker f = Q. We need to find a basis. 
Let A2 = A ®Q Q2. The map / induces a map 



Ja 



-3) VQ2(v^)'Y / 



f ). The 



To find a basis of </4(Q2)/ker /, we look for Q2-rational divisors of degree and determine 
their images under /. It is a straightforward exercise in algebraic number theory to deter- 
mine whether their images are independent in (Q2(\/— 3)^/Q2(\/— 3)^^)^ 
following form a basis of J4(Q2) / ker /: 

[(0:1:0) -(0:1:1)], [(1 : : 0) - (0 : 1 : 1)] , 
[(2: -1:0(2)) -(0:1:1)], [(1 : : 1 + 0(2)) - (0 : 1 : 1)] 
[(4 : -3 : 0(2)) -(0:1:1)], [(5:4:1+ 0(2)) -(0:1:1)] 



We compute the image of 74(02)/ ker / in (Q2(v^)''/Q2(v^)''^)^ 
pute that its inverse image under P2\h has basis {(—712,^5), (1,£:2)}- Thus 



2^) 



and com- 



2 > dimSe4ke('^4,Q) > dim J4(Q)/ ker / = rank J4(Q) > 2, 

and equality holds everywhere. (We did not need the conditions on Sel|^i^-e( J4, 
from other primes.) 
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11.2.2. Table with 2-descent data. We computed the fake 2-Selmer groups for 05,...,0io 
in ways similar to that explained in detail for O4. Table 5 can be used to check the fake 
2-Selmer group computations for O5, . . . , Ciq. In the column labelled octic, we present the 
coefficients of t^, . . . , 1 for a polynomial defining the 8-dimensional algebra A. We also give 
the dimensions of J(Q2)[2] and J(Q)[2]. Basis elements of J(Q2)/ker/ are represented by 
Q2-rational degree divisors. Lastly, we give the rank of J(Q). 

Regarding dim J(Q2)[2], note that 2-torsion points are represented by a partition of the 
set of 8 fiex triangles into two sets of even cardinality. So we have the trivial 2-torsion 
point 0, corresponding to the trivial factorization of the octic polynomial over Q2, points 
corresponding to factors of degree 2, and finally points corresponding to a factorization of 
the octic polynomial into two factors of degree 4 over Q2 or into two factors of degree 4 that 
are conjugate over some quadratic extension 0/Q2. For example, dim J5(Q2)[2] = 2, even 
though the octic polynomial is irreducible over Q2. This phenomenon came up already when 
dealing with O4 above: the fact that the octic polynomial defining the algebra split into four 
quadratic factors over Q2 defining the same quadratic extension Q2(-\/— 3) gives rise to an 
additional independent point in J4(Q2)[2]. 



12. Chabauty and Mordell-Weil sieve 

We discuss the Mordell-Weil sieve first since this is often performed before the Chabauty 
computation. 
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i 


octic 


dim 

Ji(Q2)[2] 


basis of Ji(Q2)/ker(/) 


dim 

^^(Q)[2] 


rank 


5 


1,2,0,0,-21, 
0,84,-30,-123 


2 


[(1 : 1 : 1) - (0 : 1 : 0)] 
[(1:1:5 + 0(23)) -(0:1:0)] 
[(2:2:3 + 0(2^)) -(0:1:0)] 
[(-l:l:3 + O(23))-(0:l:0)] 





3 


6 


1,0,-42,0,567, 
0,-1890,0,-567 


1 


[(0 : 1 : 0) - (0 : 1 : 1)] 
[(-1:1:0) -(0:1:1)] 
[(4:l:-l+O(22))-(0:l:l)] 


1 


2 


7 


1,2,-14,-98,-217, 
-182,196,548,529 


2 


[(0 : : 1) - (0 : 1 : 
[(2:2: -1 +0(2^)) - (0 
[(2 : -2 : 1 +0(2^)) - (0 
[(2 :-l: 3 + 0(23)) -(0 


)] 
1 

1 

1 


0)] 
0)] 
0)] 





2 


8 


1,0,0,56,-210, 
336,-224,24,21 


2 


[(2 : -1 : 0) - (0 : : 1)] 
[(0:2: 1 + 0(23)) -(0:0:1)] 
[(-2 : 1 : 10 + 0(2^)) -(0:0:1)] 
[(l:-3:l+O(23))-(0:0:l)] 





2 


9 


1,-2,-14,14,119, 
182,112,16,-11 


2 


[(1 : 1 : 0) - (0 : : 1)] 
[(0:2: -3 + 0(23)) _ (q : Q : 1)] 
[(4:2:l + O(23))-(0:0:l)] 
[(2 : 1 : 6 + 0(2^)) -(0:0:1)] 





2 


10 


1,-3,0,14,0, 
-84,112,-24,-12 





[(-l:l:2 + 0(23))-(l 
[(0:1: -1+0(23)) - (1 
[(1 : -4: 4 + 0(23)) -(1 


1 
1 
1 


0)] 
0)] 
0)] 
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Table 5. Data needed for 2-descents for O5, . . . , Oio- 



12.1. Mordell-Weil sieve theory. Let O be a curve over Q and J be its Jacobian. (The 
assumption that the ground field is Q is for simphcity only; other global fields would do 
just as well.) Suppose that we know an embedding C ^ J over Q. What we call the 
Mordell- Weil sieve is a method introduced by Scharaschkin [Scharaschkin2004preprint] that 
uses reduction modulo p for several primes p to show that certain points in J(Q) cannot 
lie on the image of C. Suppose also that we know explicit generators for J(Q). Then the 
desired set C{ff) is the set of points of J(Q) that lie on C. This set is difficult to compute: 
indeed, it is not known whether there exists an algorithm to solve this problem in general. 

Therefore we pick a prime p of good reduction for C (and J), and we approximate the 
condition that a point P G J(Q) lie on C with the weaker condition that the reduction 
of P in J(Fp) lie in C'(Fp). For each p, this weaker condition allows us to "sieve out" 
certain cosets of a finite- index subgroup in J(Q). The conditions at different p can interact 
nontrivially, because the orders of J(Fp) may share prime factors. If we are lucky, after 
using these sieve conditions at a few primes, no points on J(Q) remain; in this case one 
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concludes that C(Q) is empty. In fact, there is a heuristic that predicts that when C(Q) = 0, 
sieving with a suitable set ofp will rule out all points of J(Q) [Poonen-heuristic2005preprint]. 
This obstruction to the existence of rational points is closely related to the Brauer-Manin 
obstruction: see [Scharaschkin2004preprint] and in particular [Stoll2005preprint]. 

Remarks 12.1. 

(1) With care, one can obtain sieve conditions also at primes p of bad reduction. Namely, 
let C be the minimal proper regular model of C over Zp, and let be the Neron 
model of J over Zp. Suppose we have an Albanese embedding C ^ J associated to 
a rational point on C. Let C^'^""^^ be the smooth locus of the structure morphism 
C — > Spec Ijp] thus C^^^o*!^ is obtained from C by deleting the singular points on the 
special fiber C^^. By the Neron property, the morphism C ^ J extends to a Zp- 
morphism C^^°°^^ ^ J. Points in C(Q) extend to Zp-points of C^mooth^ need 
only examine the set of points J(Q) whose reduction in j7'(Fp) lies in the image of 

(2) Sometimes it is more convenient to work in a homomorphic image $ of J'{¥p) instead 
of J{¥p) itself. 

(3) Working in j7'(Zi/p"'Z) for n > 1 also might give more information than j7'(Fp) alone. 

(4) We assumed that we know generators for J(Q), but it may be enough to know 
generators for a subgroup Q of finite index. For instance, if one can prove that the 
index (J(Q) : Q) is prime to the order of J(Fp), then Q and J(Q) will have the same 
image in J(Fp). 

(5) If C(Q) is known a priori to be nonempty, obviously no complete obstruction to 
rational points can be obtained. In this case, one can try to use the sieve information 
as input to a Chabauty argument, to restrict the possibilities for residue classes. 
The Chabauty argument still requires that the p-adic closure of J(Q) be provably of 
dimension less than dim J, however, and this usually requires rank J(Q) < dim J. 

The first examples of this method were given in [Scharaschkin2004preprint]. The method 
was refined and implemented for genus 2 curves over Q in [Flynn2004]. 

12.2. Chabauty theory. Here we explain Chabauty's method [Chabauty 1941], as made 
explicit by Coleman [Colemanl985chabauty]. Let C be a smooth projective curve. Let J he 
its Jacobian. Assume that C(Q) is nonempty (this is true for all of our Cj); choose P G C(Q). 
Identify C with a subvariety of J by mapping each T G C to T i-^ [T — P]. Assume that 
J(Q) has rank r < g, where g = dim J is the genus of C. Let p be a finite prime. If a; is a 
holomorphic 1-form on Jq^ or its puUback to Cq^, then following [Colemanl985torsion] we 
define a homomorphism A^^ : J{Qp) Qp hy Q t-^ u. (This integral can be defined on a 
neighborhood of using the formal group, and then extended linearly to all of J{Qp)-) Say 
that uj kills an element or subset S of J{Qp) if A^;!^ = 0. By linear algebra, we can find (to 
any desired p-adic precision) at least g — r > independent forms u killing J(Q) and hence 
C (Q) . The method consists of bounding the number of common zeros of the corresponding 
integrals A^ on C{Qp), and hoping that enough points in C(Q) are found to meet the bound, 
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in which case these points are all of them. If the method fails, we can try again with a 
different p, or combine the argument with a Mordell-Weil sieve. 

Let us explain how to do a Chabauty computation in practice. Let C be the smooth 
projective model of the affine plane quartic curve g{u, v) = 0. For the computation, we need 
Gi, . . . ,Gr G J(Q) which generate a subgroup of finite index in J(Q). Usually we obtain 
this information when we determine r. Choose a (small) prime p at which C, and hence J, 
has good reduction. Pick a uniformizing parameter t of C at P that is also a uniformizer 
at P modulo p. For each i, we calculate rrii G Z>o such that rriiGi reduces to mod p, and 
find a divisor of the form Di — 3P linearly equivalent to rriiGi, where Di = Pi^i + Pj^2 + Pi,?, is 
an effective divisor of degree 3, defined over Q. If P does not reduce to a Weierstrass point 
mod p, then it follows that each Pj^ is congruent to P modulo p. 

A basis for the space of holomorphic differentials on C is given by 

dv udv V dv 
oji = — , uj-2 = and oj^ = . 

9u 9u 9u 

We express ujj as an element of Q[[t]] dt and integrate formally to obtain \j = cuj G t Q[[t]]. 
Then for all i and j, we compute 

rmiG, rlD-SP] rP^.i i-P^.i r^P^.3 

{rriiGi) = / L^Uj = / L^ujj = + + 

Jo Jo Jp Jp Jp 

= A,(t(P,,i)) + A,(t(P,,2)) + A,(t(/^„3)) . 

The series converge, since the t{Pi^k) are of positive p-adic valuation (this is because Pi^k has 
the same reduction mod p as P). Computing the kernel of u i — > {\^{miGi), . . . , X^{mrGr)), 
we find s = 3—r independent holomorphic differentials r/i, . . . , r^^ such that the corresponding 
1-forms on Jq^ kill J(Q). We rescale each so that it reduces to a nonzero differential fji 
modulo p. Let Q G C(¥p) and let u = miuj ^^(r/j). li p > u + 1, there can be at most u + 1 
rational points on G reducing to Q mod p: see, e.g., [Stoll2004preprint] . 

For i = 1, 3, 7, 8, 9, 10, we want to do Chabauty arguments using the prime 7, at which Gi 
has bad reduction. However, the given model of Gi in is a minimal proper regular model 
over Z7, and the special fiber Ci has just one component, which is of (geometric) genus 0. 
Let J'i be the Neron model of Jj over Z7. Let Jj = J7i x^^ F7 be the special fiber of J'i. Since 
Ci has just one component, Jj is connected. Let Q^Qoti^ be the smooth part of C*j. We write 
JiiFj) for Ji{¥Y), and write ^(Ft) for C'f'"°°*^(F7), which is a subset of MFy). In all the 
cases we consider, we find that Jj(F7) ~ (Z/7Z)'^. We can proceed as in the case of good 
reduction; the differentials reduce to holomorphic differentials on (7,^™°°*^ in this case. 

12.3. Results. For brevity, we give full detail for the Chabauty and Mordell-Weil sieve 
arguments for just one curve. We chose G2 since our argument for G2 involves a shortcut that 
apparently is not described elsewhere in the literature. Afterwards we sketch the Chabauty 
arguments for the remaining curves. 

Define the known part Jj(Q)known of Ji{Q) as the subgroup generated by the rational points 
in Table 3 and the element [R — 3P] mentioned in Propositions 11.3 and 11.4. 
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12.3.1. Determining C2(Q). We will show that 

C2(Q) = {(1 : : 0), (0 : 1 : 0), (0:0: 1), (1 : -2 : -1), (1:1: -1)} . 

We work with p = 5; we have J2(^5) — Z/126Z. The reduction of J2(Q)known is the cyclic 
subgroup of order 63. We use P = (1 : — 2 : —1) as a basepoint. The five known rational 
points of C2 reduce to different points in C2(F5), which has size 6. 

We first have to find the space of 5-adic differentials that vanish on J2(Q). Dehomogenize 
by setting z = 1; then a basis of the space of holomorphic differentials on C2 is given by 

dy xdy y dy 



9x2y + 2' 9x2?/ + 2' 9x2?/ + 2' 

(As line sections, we have uji ^ z, uj2 ^ x, ^ y. This point of view is useful when 
determining the zeros of differentials.) The point G = [(1 : : 0) — (1 : —2 : —1)] G J2(Q) is 
of infinite order, and 9G is in the kernel of reduction mod 5. We find an effective divisor D 
of degree 3 such that 9G = [D — 3P]. We choose t = x + 1 as a uniformizer at P; then we 
can express x, y, and the differentials in terms of t as follows. 

X = -1+t 

20 226 2 1024 , 7702 , 

( 1 53 478 2 6530 o 1135 . \ , 

V 32 35 37 310 314 J 

(\ 26 1 2 6376 o 527795 . \ , 

V32 35 37 310 314 J 

/ 2 46 122 2 2618 , 107380 . \ , 

We obtain the logarithms A^^. in terms of t by formal integration of the latter three power 
series: 

1 53 2 478 3 3265 4 227 5 

Ai — — T t — — — -— t — — t — — -— t -|- . . . 

32 2-35 38 2-310 314 

1 13 2 1 ^ 1594 4 105559 , 

\2 = — t^ + — t^ TTT t T7— t + • • • 

32 35 38 310 314 

2 23 2 122 o 1309 , 21476 , 

A3 = — -t -t^ + 777 i + — 7^ + ... 

32 35 38 2-310 314 

If ti,t2, ts are the values of t at the three points in D, then 



A^, (9G) = A,(ti) + A,(t2) + A,(t3) = + ^2 + 



where \i(t) = J2j>i ■^ij^"'- We obtain the power sums t{ + + 4 froin the coefficients of the 
characteristic polynomial {X — t\)(X — t2){X — t^) e Q[X]. The 5-adic valuation of each 
is positive (at least 1/3), and so the series above converge in Q5. We obtain 

A^, (9G) = -2 - 5=^ + 0(5^) , A^2 (9G) = -16 - 5 + 0(5^) , A^3 (9G) = -27 - 5 + 0(5^) . 
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We see that 

dy , _ „ _ (x + 2y) dy 

r]i=uji = — ^ z and 772 = ^^2 + 2u;3 = — ^ x + 2y 

2 — x'^y 2 — x'^y 

are reductions mod 5 of differentials killing J2(Q)- Since the common zero of z and x + 2y 
in P^(F5) is not on C, we have min{fQ(r7i), wq(?72)} = at all Q G C{¥^). Thus each of the 
six residue classes contains at most one rational point. Since five of the six do contain a 
rational point, it remains to show that there is no rational point reducing to the sixth, which 
is (2 : 2 : 1) e C2(F5). 

To that end, we pick Q e ^2(05) reducing to (2 : 2 : 1); we take Q = (3±^p9 : 2 : 1), 
where we choose the square root that is —1 mod 5. We first need to find Xuj{[Q — P]) for 
a basis of differentials u killing J2(Q). In principle, we can find this by first computing 
21 [Q — P] = [D' — 3P] in the kernel of reduction as above, but in this case, there is a trick, 
taught to us by Joseph Wetherell, that allows us to simplify the computation. 

Note that [(2 : 2 : 1) — P] G ^2(^5) is in the reduction of J2(Q)known; we find that 
G' = [(0 : 1 : 0) + (1 : 1 : -1) - (1 : : 0) - P] G J2(Q) has this image. If u kills J2(Q), then 
Xuj{[Q — P]) = Xuj{[Q ~ P] " G'), where now [Q — P] — G' is in the kernel of reduction, and 
we can compute the logarithm as before. With 

= cui - 50 UJ2 + 0(5^) and 772 = u;2 - 33 + 0(5^) , 

we obtain the values A^,([Q - P]) = -12 ■ 5 + 0(5^) and \^{[Q - P]) = -14 • 5 + 0(5^). 
We now compute A^. ([Q' — Q]) for points Q' in the residue class of Q. Taking T = y — 2 as 
a uniformizer at Q, we obtain for points Q' such that T{Q') = 5r: 

KilQ' - P]) = KilQ' - Q]) + KilQ - P]) = -12 ■ 5 + 4 ■ Sr + 5^=^ + 0(5^) 

A^,([g'-p]) = A^,([g'-g]) + A^,([g-p]) = n-5 + 9-5r-3-5^T^ + 0(5^) 

We see that XrjiHQ' ~ P]) ~ ^milQ' " P]) = 2 • 5 + 0(5^) and so never vanishes. This proves 
that there is no rational point on C2 reducing to (2 : 2 : 1). 

12.3.2. Determining Ci{Q). We show that 

Ci(Q) = {(0 : : 1), (0 : 1 : 0), (0:0: 1), (1 : -1 : 2)} . 

As described in Section 12.2, we have Ji(F7) ~ (Z/7Z)'^. From Section 10, we see that 
dimp^ ^i(Q)/7Ji(Q) = 2. The reduction of Ji(Q)known has dimension 2, so that is also the 
reduction of the whole Ji(Q). 

Using (1 : — 1 : 2) as a basepoint, we find that there are exactly four points of Ci(F7) in 
the reduction of J(Q). They are the reductions of the four known rational points on Ci. So 
it suffices to show that there is only one point of Ci(Q) in each of those residue classes. 

Proceeding as for C2, we find reductions of differentials killing Ji(Q): 

rji ^ X + 2y , r]2 ^ X — z . 

The common zero oi x + 2y and z in P^(F7) is not on Ci, so there is at most one rational 
point per residue class, as desired. 
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12.3.3. Determining CsiQ) ■ We show that 

C3(Q) = {(1 : : 0), (0 : 1 : 0), (0 : : 1), (1 : 1 : -1)} . 

We have J3(F7) ~ {Z/TZf. From Section 10 we see that diniF, J3(Q)/7J3(Q) = 2. The 
reduction of J3(Q) known has dimension 2, so that is also the reduction of the whole Jsi^Q). 

Using (1 : 1 : —1) as a basepoint, we find that there are exactly four points of C3(F7) in 
the reduction of J3(Q). Again, they are the reductions of the four known rational points 
on C3. So it suffices to show that there is only one point of C^IQ) in each of those residue 
classes. 

Proceeding as before, we find reductions of differentials killing Jsi^Q): 

rfi ^ 2x — y , r]2 ^ X + 2z . 
The common zero oi 2x — y and x + 2z in P^(F7) is not on C3, so we are done. 

12.3.4. Determining C^IQ) . We show that 

C4(Q) = {(1:0:0),(0: 1:0), (0:1:1)}. 

We have J4(F5) ~ (Z/GZ)^. The reduction of J4(Q)known is isomorphic to (Z/6Z)^. Since 
Ja^Q) and J4(Q)known are both isomorphic to x Z/4Z, and J4(Q)known has odd index in 
JaIQ), the whole J4(Q) must also reduce to the same (Z/6Z)2 sub group. We use (1 : : 0) as 
a basepoint. Then the only elements in C4(F5) in the reduction of J4(Q) are the reductions 
of the three known rational points. So it suffices to show that there is only one point of 
C4(Q) in each of those residue classes. 

Since the rank is 2, we have only one differential, fj ^ x + y. It does not vanish at any of 
the three relevant points of C4(F5); this proves the claim. 

12.3.5. Determining Cq{Q) . We show that 

CeiQ) = {(0:1: 0), (1 : -1 : 0), (0 : 1 : 1), (0 : 1 : -1)} . 

We use P = (0 : 1 : —1) as a basepoint. We have an isomorphism Z^ x Z/4Z ^6(Q)known 
taking the standard generators (1,0,0), (0,1,0), (0,0,1) to [R-3P], [(0:1: 0)-P], [(1 : -1 : 
0) — P], respectively. From the 2-descent, we know that J6(Q)known has odd index in Jq^Q), 
which also is isomorphic to Z^ x Z/4Z. We have J6(Fii) ^ (Z/16Z) x (Z/SZ)^ x (Z/2Z). The 
reduction of J6(Q)known is isomorphic to (Z/SZ)^ x (Z/4Z), with [R - 3P], [(0 : 1 : 0) - P], 
[(1 : — 1 : 0) — P] mapping to the standard generators. By the above, Jq{Q) has the same 
reduction as J6(Q)known- There are five points in C6(Fii) lying in the reduction of Jq^Q); 
four of those are the reductions of the four known rational points. The fifth is the reduction 
of 

m[R - 3P] + n[{0 : 1 : 0) - P] + p [(1 : -1 : 0) - P] 

with {m,n,p) = (1,4,2). 

We have ^¥23) ~ Z/32Zx (Z/16Z)2xZ/2Z. The mod 23 reduction of J6(Q) is isomorphic 

to (Z/16Z)2xZ/4Z, with [P-3P], [(0:1: 0)-P], [(1 : -1 : 0)-P] mapping to the standard 
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generators. We find that if {m^n^p) G satisfy (m mod 8, n mod 8, p mod 4) = (1,4,2) 
then the mod 23 reduction of 

m[R - 3P] + n[{0 : 1 : 0) - P] + p [(1 : -1 : 0) - P] 

is not in C6(F23). Because J6(Q)known has odd index in Je{Q), the points of Je{Q) reducing 
to the fifth point of C6(Fii) of the previous paragraph do not reduce mod 23 to points in 
^6(^23)- So it suffices to show that there is only one point of Cq{Q) in each of the four 
residue classes of the four known rational points modulo 11. 

The differential is fj ^ x + 5y; it does not vanish at the four relevant points of C6(Fii). 
This proves the claim. 

12.3.6. Determining C-jIQ) . We show that 

C7(Q) = {(0:1:0), (0:0:1), (0:1:1)}. 

We have J7(F7) ~ (Z/7Z)'^. The group J7(Q) has rank 2 and no 7-torsion. The reduction of 
<^7(Q)known is isomorphic to (Z/7Z)^, so that is also the reduction of the whole Jt^Q). 

We use (0 : 1 : 0) as a basepoint. Then the only elements in C7(F7) in the reduction of 
JriQ) are the reductions of the three known rational points. So it suffices to show that there 
is only one point of Cj{Q) in each of those residue classes. 

Our differential mod 7 is <-> x — 2z. It does not vanish at (0 : : 1) and at (0 : 1 : 1), 
but it has a simple zero at (0 : 1 : 0). So we see that there is at most one rational point in 
each of the two first residue classes, but there may be two in the third. Since we are using 
(0 : 1 : 0) as a basepoint, the information over Q7 tells us that any point of Ct{Q) in the 
residue class of (0 : 1 : 0) is in 7Jt{Q). 

We have J7(Fi3) ^ {Z/UZf. The reduction of J7(Q)known is isomorphic to Z/14Zx Z/7Z. 
From the 2-descent, we know that the index of J7(Q) known in <^7(Q) is odd. Thus, the 
reduction of the whole J7(Q) is isomorphic to Z/14Z x Z/7Z. Only one point of C7(Fi3) has 
trivial image in J(Fi3) ® Z/7Z, namely (0:1:0). A holomorphic differential killing JjiQ) 
reduces mod 13 to u; ^ x — 2y, which does not vanish at (0 : 1 : 0). So there is only one 
point of Ct^Q) in this residue class. (Incidentally, u vanishes at one of the other interesting 
residue classes, namely (0:0:1). So information obtained from Q13 alone would also not 
be sufficient.) 

12.3.7. Determining Cs{Q) ■ We show that 

C8(Q) = {(0:0:1),(2:-1:0)}. 

We have J8(F7) — (Z/7Z)'^. The group Js{Q) has rank 2 and no 7-torsion. The reduction of 
J8(Q) known is isomorphic to (Z/7Z)^, so that is also the reduction of the whole JsiQ)- 

We use (0 : : 1) as a basepoint. Then the only elements in C8(F7) in the reduction of 
Js{Q) are the reductions of the two known rational points. So it suffices to show that there 
is only one point of 6*8 (Q) in each of those residue classes. 

Our differential mod 7 is 77 ^ x — y — 3z. It does not vanish at (0 : : 1) and at (2 : — 1 : 0). 
This proves the claim. 
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12.3.8. Determining Cg{Q) . We show that 



C9(Q) = {(0:0:1),(1:1:0)}. 

We use P = (0 : : 1) as a basepoint. We have J9(Q)known — generated by [(1:1: 0) — P] 
and [R — 3P]. The group Jg{Q) has rank 2 and no 7-torsion. 

We have J9(F7) ~ {Z/7Zf, with [(1:1: 0) -P] and [P-3P] reducing to F7-independent 
points, so their reductions form a basis also for the reduction of J9(Q). 

There are four points of C9(F7) in the reduction of J9(Q): the reductions of m[(l : 1 : 
0) - P] + r2[P - 3P] with (m,n) = (0, 0), (1, 0), (2, 1), (4, 3). Clearly (m,n) = (0,0) and 
(1, 0) correspond to the reductions of the two known rational points. So we must eliminate 
the possibilities of (m, n) = (2,1) and (4,3). We do this by working over F13. We have 
J9(Fi3) ~ Z/7Z X Z/170Z. The classes (m,n) = (2, 1) and (4,3) in (Z/TZ)^ map to classes 
in J9(Fi3) (8) Z/7Z. that are not in the image of C9(Fi3) in J9(Fi3) (g) Z/7Z. 

Our differential mod 7 is fj^x — y — 2z. It does not vanish at (0 : : 1), so there is only 
one rational point in this residue class. But rj has a simple zero at the other point, (1:1:0). 
So we have to do another Chabauty computation to show that (1 : 1 : 0) is the only point of 
Cg{Q) in [(1:1:0)-P] + 7J9(Q). 

We will use p = 11. We have J9(Fii) ~ Z/IOZ x Z/140Z. We know from the 2-descent that 
the index of J9(Q)known in JdiQ) is odd. The reduction modulo 11 of J9(Q)known is isomorphic 
to Z/5Z X Z/70Z and so must be the reduction of the whole Jg{Q). Only three points of 
C9(Fii) are in the reduction of Jg{Q). Only one of them the same image in J9(Fii) (g) Z/7Z 
as [(1 : 1 : 0) — P] + 7J9(Q), and that is the reduction of (1 : 1 : 0). So it suffices to show 
that there is only one point of Cg{Q) with reduction equal to (1 : 1 : 0) modulo 11. The 
differential mod 11 is u ^ x — 5y + Az, and it does not vanish at (1 : 1 : 0). So there is only 
one point of C9(Q) in this mod 11 residue class. 

12.3.9. Determining Cio(Q). We show that 

Cio(Q) = {(l:0:0),(l:l:0)}. 

We have Jio(F7) ~ (Z/7Z)^. The group Jio(Q) has rank 2 and no 7-torsion. The reduction 
of Jio(Q)known is isomorphic to (Z/7Z)^, so that is also the reduction of the whole Jio(Q)- We 
use (1 : : 0) as a basepoint. Then the only elements in Cio(F7) in the reduction of Jio(Q) 
are the reductions of the two known rational points. So it suffices to show that there is only 
one point of Cio(Q) in each of those residue classes. The differential mod 7 is f] ^ x + y + 3z] 
it does not vanish at either of the two relevant points in Cio(F7), proving the claim. 



13. Mordell-Weil sieve for C- 



5 



In this section we prove that C5(Q)subset = 0- The method used is the Mordell-Weil sieve 
described in Section 12.1. 
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13.1. The strategy for C5. Because C5(Q) is nonempty and rankJ5(Q) = dimJs, we 
cannot expect to determine C^IQ) using only the methods described in Section 12.1. On 
the other hand, by Lemma 7.8 we need only the subset C5(Q)subset of rational points lying 
in certain residue classes, so there is hope of proving C5(Q)subset = 0- 

To succeed, we must use the 2-adic and 3-adic conditions defining C5(Q) subset, since neither 
alone is enough to exclude all the rational points on C5. This means that we must use the 
sieve information at the bad primes 2 and 3. In fact, we will use only the component groups 
of the Neron models at 2 and 3. We will discover that the only primes dividing the orders of 
these groups are 2 and 7 (respectively), so we will sieve also at primes p of good reduction 
chosen so that J5(Fp) has large 2-primary and/or 7-primary parts. 

Let Pq, Pi, P2, P3 (in this order) be the four rational points on C5 listed in Table 3. Let 
Qi G J(Q) be the class of the divisor P^ — Pq. Let Q be the subgroup of J(Q) generated by 
the Qi. We will show that (J^i^Q) : Q) is prime to 14, and we will use groups $ of order 
divisible only by 2 and 7 in the sieve. We will determine the set of (rii, 71.2, ns) G such 
that riiQi + n2Q2 + n^Q^ satisfies the sieve conditions. 



13.2. Sieve information at 3. We will compute the minimal proper regular model C of C5 
over Z3, and then the component group of the Neron model of its Jacobian. Our exposition 
will be terse, since [Flynn-et-al2001] contains a detailed account of the general method. We 
will use the same label for a component and for its strict transform(s) after blowing up. 
Subscripts on components denote multiplicities, and a component without a subscript has 
multiplicity 1. 

Start with the model in P|g defined by the ternary quartic. Its special fiber has two 
irreducible components A and B, and is regular except at the point s where A intersects B. 

Blowing up s gives a regular Zs-scheme C. Its special fiber, shown in Figure 3, has four 
irreducible components, all isomorphic to Pp^. 

The intersection matrix is 
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A B C D2 



A -3 1 1 
5 1-50 2 
CO 0-2 1 
D2 1 2 1-2 

(The diagonal entries are computed using the condition that the inner product of each row 
with the multiplicity vector (1, 1, 1, 2) is 0.) 

Let J' be the Neron model of J5 over Z3. Then the component group $ of Jf^ is obtained 
as follows. View the multiplicity vector as a Z-linear map Z. Take the quotient of its 

kernel by the span of the rows of the intersection matrix. We get an isomorphism $ ~ Z/7Z. 

We will use the homomorphic image $ = Z/7Z of J'lF^) for the sieve. The points 
Pq, Pi, P2, P3 map to components B, C, B, A respectively. If P G C^^Q), then the correspond- 
ing point on the special fiber lies on A, B, or C (it must be a component of multiplicity 1), 
and the class of P — Pq in ^(Q) maps to the element 3, 0, or 1 in Z/7Z accordingly (for 
a particular choice of isomorphism $ ~ Z/7Z). In particular, Qi,Q2,Q3 map to 1,0,3 in 
Z/7Z. 

If moreover P G C5(Q)subsct, then the image of P in €{¥3) is not on A'^™""*^ or B'''^°°^^ 
in the regular model since smooth points on these components in the regular model map to 
points in the plane quartic model other than s = (0 : 1 : 0). Therefore the image of P lies 
on C, and P — Pq maps to 1 in Z/7Z. Thus if riiQi + n2Q2 + n^Q^ = [P — Pq], then 

(13.1) ni + 3^3 = 1 (mod 7). 



13.3. Sieve information at 2. We repeat the computations of the previous section, but at 
the prime 2. 

The fiber at 2 of the original plane model consists of a conic A and a line B2. They are 
tangent at the point si := (1 : : 0). Because of the multiplicity, no points on B2 are 
smooth. But the whole Z2-scheme is regular except at the points Si and S2 := (1 : 1 : 1) on 
the special fiber. 

Blowing up Si yields a model whose special fiber has new components C and D2, and a 

new non-regular point S3 at the intersection of A, B2, C, D2- Blowing up S2 produces new 

components E and F and a new non-regular point S4 at the intersection of B2, E, F. (For the 

sake of definiteness, label E and F so that P3 G C^iff) reduces to a point on F.) Blowing up 

S3 produces new components G2 and if4, and a new non-regular point S5 at the intersection 

of A, G2, -^4. Blowing up S4 produces a new component I2, and no new non-regular points. 

Blowing up S5 produces new components J3 and -R'4 and a new non-regular point Sg at the 

intersection of A, J3, K4^. Blowing up Sg produces new components L4 and M4 (let L4 be 

the one that intersects A) and a new non-regular point S7 at the intersection of L4 and M4. 

Blowing up S7 produces new components and O4 (let N4 be the one that intersects L4) 
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Figure 4. The special fiber of C5 at 2. 



and a new non-regular point Ss at the intersection of A'4 and O4. Blowing up sg produces a 
new component P4 and no new non-regular points. 

The resulting Z2-scheme C is regular, and its special fiber has 16 components, all isomor- 
phic to Pi : see Figure 4. All the intersection numbers are or 1, except the self-intersection 
numbers, which are —4 for A, —3 for B2, and —2 for each other component. The points Pq, 
Pi, P2, P3 map to components C, A, A, F respectively. 

Let J' be the Neron model of J5 over Z2. We find that the component group $ of J^^ is 
isomorphic to Z/4Z x Z/4Z. If P G C^{Q), then the corresponding point on the special fiber 
lies on one of A, C, E, F, and the class of P - Pq in J(Q) maps to (0, 3), (0, 0), (1, 0), (1, 2) 
in Z/4Z X Z/4Z accordingly (for a particular choice of isomorphism $ ~ Z/4Z x Z/4Z). In 
particular, Qi, Q2, Q3 map to (0,3), (0,3), (1,2) respectively. 

If moreover P G C5(Q)subsct, then P does not reduce to a point on A. Thus 

(13.2) ni(0,3)+n2(0,3) + n3(l,2) = (0,0) or (1,0) or (1,2) (mod 4). 

13.4. Sieve information at 23. Using Magma's ClassGroup function, we find that 

, , z z z z 

J^iWo^) ~ — X — — X — — X ^— . 

Magma also lists the points of C5(F23) and computes their images in J5(F23). The condition 
that the image of riiQi +n2Q2 + n^Q^ in J5(F23)/4J5(F23) be in the image of C5(F23) forces 
(ni, 722, 723) to be congruent to one of 

000, 001, 002, 010, Oil, 021, 030, 100, 101, 102, 110, 113, 220, 303, 312, 322 

modulo 4 (we have omitted parentheses and commas within each triple, for readability). 
Combining this with (13.2), we find that only 

000,001,021,220 



are possible. In particular rii and 722 are both even. 
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13.5. Sieve information at 97. We have J5(F97) ~ (Z/98Z)3. The condition that the 
image of riiQi + n2Q2 + n^Qs in J5(F97) be in the image of C5(F97) imposes congruence 
conditions on (ni,n2,n3) modulo 98. Combining these conditions with (13.1) and the con- 
dition that rii and n2 be even proves that {ni,n2,n3) is congruent modulo 14 to one of the 
following: 

(2,10,9), (6,2,10), (6,10,10), (8,0,7). 

13.6. Sieve information at 13. The group J5(Fi3) is cyclic of order 2- 7 - 157. The image of 
C5(Fi3) in J5(Fi3)/14J5(Fi3) has size 6, and the resulting conditions on {ni,n2,n-s) modulo 
14 contradict those in the previous paragraph. 

13.7. End of proof. Finally we must verify that {J^iQ) '■ Q) is prime to 14. By the results 
in Table 5, MQ) ~ Z^. The image of Q under J^iQ) M¥23)/2J5{¥23) has Fg-dimension 
3, so 2 t (J5(Q) : Q). The image of Q under 

^^^^^^7J5(Fi3) 7M¥,,) 

has Fy-dimension 3, so 7 f (J5(Q) : Q). Thus C5(Q)subset = 0- This completes the proof of 
Theorem 1.1. 
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